Техническая информация
Вредоносные функции:
Загружает на исполнение код следующих детектируемых угроз:
- Adware.Dowgin.14.origin
Осуществляет доступ к приватному интерфейсу телефонии (ITelephony).
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) trac####.58.com:80
- TCP(HTTP/1.1) n####.5####.com.cn:80
- TCP(HTTP/1.1) wb.110.ta####.com:80
- TCP(HTTP/1.1) c.5####.com.####.com:80
- TCP(HTTP/1.1) aserver####.m.ta####.com:80
- TCP(HTTP/1.1) c.g####.qq.com:80
- TCP(HTTP/1.1) gdv.a.s####.com:80
- TCP(HTTP/1.1) mf####.gam####.cn.####.com:80
- TCP(HTTP/1.1) ada####.m.ta####.com:80
- TCP(HTTP/1.1) s####.tc.qq.com:80
- TCP(HTTP/1.1) c####.e.qq.com:80
- TCP(HTTP/1.1) zhusho####.gam####.cn:80
- TCP(HTTP/1.1) l####.tbs.qq.com:80
- TCP(HTTP/1.1) zhg.ali####.com:80
- TCP(HTTP/1.1) hm.b####.com:80
- TCP(HTTP/1.1) p####.tc.qq.com:80
- TCP(HTTP/1.1) m####.b####.com:80
- TCP(HTTP/1.1) s####.e.qq.com:80
- TCP(HTTP/1.1) s####.jom####.com:80
- TCP(HTTP/1.1) v.g####.qq.com:80
- TCP(HTTP/1.1) ad####.m.ta####.com:80
- TCP(HTTP/1.1) zp.recom####.58.com:80
- TCP(HTTP/1.1) m####.gam####.cn.####.com:80
- TCP(HTTP/1.1) ii.vi.i####.cn:80
- TCP(HTTP/1.1) d.g####.qq.com:80
- TCP(HTTP/1.1) a####.u####.com:80
- TCP(HTTP/1.1) b####.58.com:80
- TCP(HTTP/1.1) gdtc####.58.com:80
- TCP(HTTP/1.1) mi.g####.qq.com:80
- TCP(HTTP/1.1) oth.up####.mdt.####.com:8080
- TCP(TLS/1.0) ae.bdst####.com.####.com:443
- TCP(TLS/1.0) sh.wagbr####.ta####.com:443
- TCP(TLS/1.0) h####.b####.com:443
- TCP(TLS/1.0) tag.b####.com:443
- TCP(TLS/1.0) wap.n.sh####.com:443
- TCP(TLS/1.0) a####.a####.m.####.com:443
- TCP(TLS/1.0) msg.umengc####.com:443
- TCP ope####.m.ta####.com:443
- TCP umengj####.m.ta####.com:80
Запросы DNS:
- a####.m.ta####.com
- a####.u####.com
- ad####.m.ta####.com
- ada####.m.ta####.com
- ae.bdst####.com
- ag####.m.ta####.com
- api.s####.b####.com
- b####.58.com
- b####.s####.b####.com
- bcfeed####.ta####.com
- c####.e.qq.com
- c.5####.com.cn
- c.g####.qq.com
- chan####.s####.com
- d####.58.com
- d.g####.qq.com
- g####.cm.58.com
- gdtc####.58.com
- h####.b####.com
- hm.b####.com
- i####.gam####.cn
- ii.vi.i####.cn
- img.5####.com.cn
- imgc####.qq.com
- j####.58.com
- j1.5####.com.cn
- j2.5####.com.cn
- l####.tbs.qq.com
- m####.b####.com
- m####.gam####.cn
- m.5####.com
- m.m.5####.com
- mf####.gam####.cn
- mi.g####.qq.com
- msg.umengc####.com
- n####.5####.com.cn
- oth.up####.mdt.####.com
- p####.g####.cn
- p####.zhanz####.b####.com
- pl####.y####.com
- qzones####.g####.cn
- s####.e.qq.com
- tag.b####.com
- trac####.58.com
- umen####.m.ta####.com
- umengj####.m.ta####.com
- v.g####.qq.com
- wb.110.ta####.com
- xiongz####.b####.com
- y####.al####.com
- zhusho####.gam####.cn
- zp.recom####.58.com
- zp.ser####.58.com
Запросы HTTP GET:
- ad####.m.ta####.com/rest/gc2?ak=####&av=####&c=####&d=####&sv=####&t=###...
- aserver####.m.ta####.com/jsapi
- aserver####.m.ta####.com/unifull/css/unifull.min.css
- b####.58.com/jinrongtouzi/27758861496516x.shtml?utm_source=####&spm=####...
- b####.58.com/yewu/34340025623757x.shtml?utm_source=####&spm=####&gdt_cli...
- c####.e.qq.com/cm.fcg?a=####&j=####&time=####
- c.5####.com.####.com/crop/ecom/m/tcb/ideaShow/main.css
- c.5####.com.####.com/crop/ecom/m/tcb/ideaShow/main_v20180516105424.js
- c.5####.com.####.com/job/img/jubao.png
- c.5####.com.####.com/job/m/common/0.1/esl_zepto.min_v20161228133534.js
- c.5####.com.####.com/job/m/full/detail/0.1/job_common_final_v20180614173...
- c.5####.com.####.com/job/m/full/detail/0.1/m.job.detail_v20180614173734....
- c.5####.com.####.com/job/m/full/detail/0.1/zp_m_recommend_v2018010215465...
- c.5####.com.####.com/job/m/resume/delivery/1.1/js/app.bundle_v2018051721...
- c.5####.com.####.com/logo/m58/40_40/logo.png
- c.5####.com.####.com/logo/m58/60_35/logo.png
- c.5####.com.####.com/m58/img/icon58b.png
- c.5####.com.####.com/m58/m3/css/m4/m.all_v20160506190752.css
- c.5####.com.####.com/m58/m3/css/m5.city_v20160506214733.css
- c.5####.com.####.com/m58/m3/js/jq.mobi.min_v0.js
- c.5####.com.####.com/m58/m3/js/m.lazyload_v20160812110246.js
- c.5####.com.####.com/m58/m3/js/m3.ui_v20180312160342.js
- c.5####.com.####.com/olympia/img/common/58logo_icon.png
- c.5####.com.####.com/olympia/img/job/job_detail.png
- c.5####.com.####.com/olympia/js/conf/boot_invoke_config_v20180329140357.js
- c.5####.com.####.com/webfonts/footer/footer.ttf?v=####
- c.5####.com.####.com/webfonts/header/header.ttf?v=####
- c.5####.com.####.com/webfonts/job/job_detail.ttf?v=####
- c.5####.com.####.com/zt/appdown/js/m_invoke_app.js?v=####
- c.g####.qq.com/gdt_mclick.fcg?viewid=####&jtype=####&i=####&os=####&asi=...
- d.g####.qq.com/fcg-bin/gdt_appdetail.fcg?ico=####&op_appid=####
- gdtc####.58.com/adJump?target=####&qz_gdt=####
- gdtc####.58.com/api?action=direct_tg¶ms={"localid":"1","cateid":"139...
- gdtc####.58.com/api?action=direct_tg¶ms={"localid":"1","cateid":"231...
- gdtc####.58.com/bj/jinrongtouzi/27758861496516x.shtml?reform=####&utm_so...
- gdtc####.58.com/bj/yewu/34340025623757x.shtml?reform=####&utm_source=###...
- gdtc####.58.com/city.html?from=####&return=####
- gdtc####.58.com/counter?infoid=####
- gdtc####.58.com/favicon.ico
- gdtc####.58.com/gdtcm?city=####&cate=####&plat=####
- gdtc####.58.com/gdtcmres?status=####&id=####&name=####&time=####&j=####&...
- gdtc####.58.com/history/save/27758861496516?_=####&callback=####
- gdtc####.58.com/history/save/34340025623757?_=####&callback=####
- gdv.a.s####.com/api/2/topic/load?page_size=####&style=####&hot_size=####...
- gdv.a.s####.com/stat/uvstat?platform=####&uuid=####&client_id=####
- hm.b####.com/hm.gif?cc=####&cf=####&ck=####&cl=####&ds=####&vl=####&et=#...
- hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&vl=####&ep=####&et=#...
- hm.b####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&vl=####&et=####&ja=#...
- hm.b####.com/hm.js?53c001d####
- hm.b####.com/hm.js?5a7a7bf####
- hm.b####.com/hm.js?a6dafb1####
- ii.vi.i####.cn/u
- m####.b####.com/sdk/c.js?appid=####
- m####.gam####.cn.####.com/2016/04/22/307-1604220939430.jpg
- m####.gam####.cn.####.com/2016/04/25/307-1604250943440.jpg
- m####.gam####.cn.####.com/2016/04/25/307-1604251005500.jpg
- m####.gam####.cn.####.com/2016/06/20/307-1606201033270.jpg
- m####.gam####.cn.####.com/2016/07/11/307-160G11031110.jpg
- m####.gam####.cn.####.com/2016/07/11/307-160G11031260.jpg
- m####.gam####.cn.####.com/2016/07/12/307-160G20912050.jpg
- m####.gam####.cn.####.com/2016/07/19/307-160GZZ2470.jpg
- m####.gam####.cn.####.com/2016/07/25/307-160H50Z3440.jpg
- m####.gam####.cn.####.com/2016/07/25/307-160H51P9220.jpg
- m####.gam####.cn.####.com/2016/07/25/307-160H51PZ40.jpg
- m####.gam####.cn.####.com/2016/07/26/307-160H60916130.jpg
- m####.gam####.cn.####.com/2016/07/26/307-160H60934010.jpg
- m####.gam####.cn.####.com/2016/07/26/307-160H60944540.jpg
- m####.gam####.cn.####.com/2016/07/28/307-160HP916060.jpg
- m####.gam####.cn.####.com/2016/07/28/307-160HP92H60.jpg
- m####.gam####.cn.####.com/2016/07/29/307-160HZUP40.jpg
- m####.gam####.cn.####.com/2016/07/29/307-160HZZQ60.jpg
- m####.gam####.cn.####.com/2016/07/30/307-160I00910380.jpg
- m####.gam####.cn.####.com/2016/08/02/307-160P2091S10.jpg
- m####.gam####.cn.####.com/2016/08/03/307-160P30952020.jpg
- m####.gam####.cn.####.com/2016/08/12/106-160Q21P0350.jpg
- m####.gam####.cn.####.com/2016/08/12/106-160Q21P2060.jpg
- m####.gam####.cn.####.com/2016/08/12/106-160Q21P5130.jpg
- m####.gam####.cn.####.com/2018/05/04/23-1P504111G80.jpg
- m####.gam####.cn.####.com/2018/05/04/23-1P5041124450.jpg
- m####.gam####.cn.####.com/2018/05/04/23-1P5041132280.jpg
- mf####.gam####.cn.####.com/2016/07/29/307-160HZ922030.jpg
- mf####.gam####.cn.####.com/2016/08/02/307-160P20935430.jpg
- mf####.gam####.cn.####.com/js/jquery.min.js
- mi.g####.qq.com/gdt_mview.fcg?posw=####&posh=####&count=####&r=####&data...
- n####.5####.com.cn/net_small.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/banner.appcache
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/banner.html
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/ad_logo.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/banner_close_b...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/bannerbg02.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/bannerbg03.jpg
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/bannerbg07.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/close02.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/close03.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/download_icon....
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/download_icon_...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/gdt_logo_black...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/icon-ad.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/sdk_bg.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/tc-gdt-sdk-ope...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/tsa_ad_logo.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/images/tsa_logo.png
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/js-release/20170821/b...
- p####.tc.qq.com/qzone/biz/gdt/mob/sdk/v2/android01/js/lib/require.js
- p####.tc.qq.com/qzone/biz/gdt/mod/android/AndroidAllInOne/proguard/his/r...
- s####.jom####.com/push.js
- s####.jom####.com/s.gif?l=/m.58.com/bj/jinrongtouzi/27758861496516x.shtm...
- s####.jom####.com/static/api/css/share_style0_32.css?v=####
- s####.jom####.com/static/api/js/base/tangram.js?v=####
- s####.jom####.com/static/api/js/share.js?v=89860593.js?cdnversion=####
- s####.jom####.com/static/api/js/share/api_base.js
- s####.jom####.com/static/api/js/share/share_api.js?v=####
- s####.jom####.com/static/api/js/view/share_view.js?v=####
- s####.jom####.com/static/api/js/view/view_base.js
- s####.tc.qq.com/gdt/0/transformer_6413827954797429092_1528863790_80.jpg/...
- trac####.58.com/m/click/empty.js.gif?site_name=####&tag=####&from=####&t...
- trac####.58.com/m/empty.js.gif?site_name=####&tag=####&referrer=####&pos...
- trac####.58.com/referrer_m.js
- zhusho####.gam####.cn/api/qqdzz/AppVersion.xml
- zhusho####.gam####.cn/index.php?m=####&a=####&aid=####
- zhusho####.gam####.cn/index.php?m=####&a=####&id=####&umengchannel=####
- zhusho####.gam####.cn/index.php?m=####&a=####&page=####&typeid=####&flag...
- zhusho####.gam####.cn/index.php?m=####&a=####&pageSize=####&page=####&ar...
- zp.recom####.58.com/api/abtest/?page=####&pagesize=####&platform=####&sh...
- zp.recom####.58.com/js/58appLaunch.js
Запросы HTTP POST:
- a####.u####.com/app_logs
- ada####.m.ta####.com/rest/sur?ak=####&av=####&c=####&v=####&s=####&d=###...
- l####.tbs.qq.com/ajax?c=####&k=####
- l####.tbs.qq.com/ajax?c=####&v=####&k=####
- oth.up####.mdt.####.com:8080/beacon/vercheck
- s####.e.qq.com/activate
- s####.e.qq.com/click
- s####.e.qq.com/msg
- v.g####.qq.com/gdt_stats.fcg
- wb.110.ta####.com/api/update.do
- zhg.ali####.com/saveWb.json
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/.imprint
- /data/data/####/0a231bd8575dcf72.txt
- /data/data/####/1003943842-1503577302
- /data/data/####/1003943842-1503728958
- /data/data/####/117013678229644642
- /data/data/####/1824952415-1094426315
- /data/data/####/1824952415-140975152
- /data/data/####/1824952415-1520548306
- /data/data/####/1824952415-1648507164
- /data/data/####/1d77ea041509fe06.lock
- /data/data/####/21c22f492aba3de8.lock
- /data/data/####/48254.xml
- /data/data/####/8ef9c457b3bbb403.lock
- /data/data/####/930a31b34bd52c08.lock
- /data/data/####/ACCS_BINDumeng;57047cbbe0f55a54dc00222f.xml
- /data/data/####/ACCS_SDK.xml
- /data/data/####/ACCS_SDK_CHANNEL.xml
- /data/data/####/AGOO_BIND.xml
- /data/data/####/Agoo_AppStore.xml
- /data/data/####/Alvin2.xml
- /data/data/####/BrowserPreference.xml
- /data/data/####/ContextData.xml
- /data/data/####/DaemonServer
- /data/data/####/GDTSDK.db
- /data/data/####/GDTSDK.db-journal
- /data/data/####/MessageStore.db-journal
- /data/data/####/MsgLogStore.db-journal
- /data/data/####/SGMANAGER_DATA2.tmp
- /data/data/####/TrineaAndroidCommon.xml
- /data/data/####/UTCommon.xml
- /data/data/####/WebViewSettings.xml
- /data/data/####/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/__local_ap_info_cache.json
- /data/data/####/__local_last_session.json
- /data/data/####/__local_stat_cache.json
- /data/data/####/__send_data_1529000586475
- /data/data/####/__send_data_1529000597543
- /data/data/####/a36c6ead54952810beb98c7affb0fdc9.temp
- /data/data/####/accs.db-journal
- /data/data/####/agoo.pid
- /data/data/####/ap.Lock
- /data/data/####/beacontsa_cover.xml
- /data/data/####/beacontsa_cover_check.lock
- /data/data/####/cc.db
- /data/data/####/cc.db-journal
- /data/data/####/channel__local_stat_cache.json
- /data/data/####/cn.gamedog.spherefightassist_preferences.xml
- /data/data/####/com.vbgtuy.tuoefx.jar
- /data/data/####/core_info
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/debug.conf
- /data/data/####/devCloudSetting.cfg
- /data/data/####/devCloudSetting.sig
- /data/data/####/eudemon
- /data/data/####/exchangeIdentity.json
- /data/data/####/exid.dat
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/gdt_plugin.jar
- /data/data/####/gdt_plugin.jar.sig
- /data/data/####/gdt_plugin.tmp
- /data/data/####/gdt_plugin.tmp.sig
- /data/data/####/gdt_suid
- /data/data/####/index
- /data/data/####/libcuid.so
- /data/data/####/libsgmainso-5.1.81.so.tmp
- /data/data/####/lock.lock
- /data/data/####/message_accs_db
- /data/data/####/message_accs_db-journal
- /data/data/####/register.xml
- /data/data/####/sdkCloudSetting.cfg
- /data/data/####/sdkCloudSetting.sig
- /data/data/####/sp.lock
- /data/data/####/spherefightassist.db-journal
- /data/data/####/tbs_download_config.xml
- /data/data/####/tbs_download_stat.xml
- /data/data/####/tbscoreinstall.txt
- /data/data/####/tbslock.txt
- /data/data/####/trinea_android_common.db-journal
- /data/data/####/ua.db
- /data/data/####/ua.db-journal
- /data/data/####/umeng_general_config.xml
- /data/data/####/umeng_it.cache
- /data/data/####/update_lc
- /data/data/####/ut.db
- /data/data/####/ut.db-journal
- /data/data/####/uuid.xml
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/data/####/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/ywPrefsTools.xml
- /data/media/####/.confd
- /data/media/####/.confd-journal
- /data/media/####/.cuid
- /data/media/####/.cuid2
- /data/media/####/.nomedia
- /data/media/####/.timestamp
- /data/media/####/0097d930b3894bd38521aeae5f6c5a8f
- /data/media/####/5da222d0fcb6422e86e78927aabf73e1
- /data/media/####/6c709c11d2d46a7b
- /data/media/####/Alvin2.xml
- /data/media/####/ApplicationCache.db-journal
- /data/media/####/ContextData.xml
- /data/media/####/dd7893586a493dc3
- /data/media/####/deviceToken
- /data/media/####/hid.dat
- /data/media/####/http___img1_gamedog_cn_2016_07_11_307_160G11031110_jpg
- /data/media/####/http___img1_gamedog_cn_2016_07_11_307_160G11031260_jpg
- /data/media/####/http___img1_gamedog_cn_2016_07_25_307_160H51P9220_jpg
- /data/media/####/http___img1_gamedog_cn_2016_07_25_307_160H51PZ40_jpg
- /data/media/####/http___img1_gamedog_cn_2016_08_12_106_160Q21P0350_jpg
- /data/media/####/http___img1_gamedog_cn_2016_08_12_106_160Q21P2060_jpg
- /data/media/####/http___img1_gamedog_cn_2016_08_12_106_160Q21P5130_jpg
- /data/media/####/http___img1_gamedog_cn_2018_05_04_23_1P504111G80_jpg
- /data/media/####/http___img1_gamedog_cn_2018_05_04_23_1P5041124450_jpg
- /data/media/####/http___img1_gamedog_cn_2018_05_04_23_1P5041132280_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_04_22_307_1604220939430_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_04_25_307_1604250943440_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_04_25_307_1604251005500_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_06_20_307_1606201033270_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_07_12_307_160G20912050_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_07_19_307_160GZZ2470_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_07_25_307_160H50Z3440_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_07_26_307_160H60916130_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_07_26_307_160H60934010_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_07_26_307_160H60944540_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_07_28_307_160HP916060_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_07_28_307_160HP92H60_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_07_29_307_160HZUP40_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_07_29_307_160HZZQ60_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_07_30_307_160I00910380_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_08_02_307_160P2091S10_jpg
- /data/media/####/http___mimg1_gamedog_cn_2016_08_03_307_160P30952020_jpg
- /data/media/####/tbslog.txt
Другие:
Запускает следующие shell-скрипты:
- <Package Folder>/files/DaemonServer -s <Package Folder>/lib/ -n runServer -p startservice -n <Package>/com.taobao.accs.ChannelService --user 0 -f <Package Folder> -t 600 -c agoo.pid -P <Package Folder> -K 1009527 -U tb_accs_eudemon_1.1.3 -L http://agoodm.m.taobao.com/agoo/report -D {"package":"<Package>","appKey":"umeng:57047cbbe0f55a54dc00222f","utdid":"WyKygMIKxRYDAGdzx1H3kvOo","sdkVersion":"220"} -I agoodm.m.taobao.com -O 80 -T -Z
- chmod 500 <Package Folder>/files/DaemonServer
- getprop ro.product.cpu.abi
- sh
Загружает динамические библиотеки:
- crash_analysis
- sgmainso-5.1
- svrv
- tnet-3.1
- ut_c_api
Использует следующие алгоритмы для шифрования данных:
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS7Padding
- DES
- DESede-ECB-PKCS5Padding
- RSA-ECB-NoPadding
- RSA-ECB-PKCS1Padding
Использует следующие алгоритмы для расшифровки данных:
- AES-CBC-PKCS5Padding
- AES-CBC-PKCS7Padding
- AES-ECB-PKCS7Padding
- DES
- RSA-ECB-PKCS1Padding
Осуществляет доступ к информации о геолокации.
Осуществляет доступ к информации о сети.
Осуществляет доступ к информации о телефоне (номер, imei и тд.).
Осуществляет доступ к информации о настроках APN.
Осуществляет доступ к информации об установленных приложениях.
Осуществляет доступ к информации о запущенных приложениях.
Добавляет задания в системный планировщик.
Отрисовывает собственные окна поверх других приложений.
