Adware.Gexin.502

Техническая информация

Вредоносные функции:

Загружает на исполнение код следующих детектируемых угроз:

Adware.Gexin.2.origin

Осуществляет доступ к приватному интерфейсу телефонии (ITelephony).

Сетевая активность:

Подключается к:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) c####.v.tvfa####.com:80
TCP(HTTP/1.1) 1####.91.33.51:80
TCP(HTTP/1.1) m####.me####.com:80
TCP(HTTP/1.1) s####.s.360.cn:80
TCP(HTTP/1.1) p3.q####.com:80
TCP(HTTP/1.1) and####.api.36####.com:80
TCP(HTTP/1.1) trac####.v.tf.####.cn:80
TCP(HTTP/1.1) d####.360####.com:80
TCP(HTTP/1.1) 1####.91.33.52:80
TCP(HTTP/1.1) sf3-ttc####.ps####.com:80
TCP(HTTP/1.1) p1.q####.com:80
TCP(HTTP/1.1) dsp.tou####.com:80
TCP(HTTP/1.1) sf1-ttc####.ps####.com:80
TCP(HTTP/1.1) p.s.3####.cn:80
TCP(HTTP/1.1) p7.q####.com:80
TCP(HTTP/1.1) sh####.me####.com:80
TCP(HTTP/1.1) s.36####.com:80
TCP(SSL/3.0) s####.tf.360.cn:443
TCP(TLS/1.0) o####.sn####.com.####.net:443
TCP(TLS/1.0) sh.wagbr####.alibaba####.com:443
TCP(TLS/1.0) m####.me####.com:443
TCP(TLS/1.0) sf1-ttc####.ps####.com:443
TCP(TLS/1.0) sf3-ttc####.ps####.com:443
TCP(TLS/1.0) s####.tc.qq.com:443
TCP(TLS/1.0) apk.d####.com:443
TCP(TLS/1.0) ad.tou####.com:443
TCP(TLS/1.0) s####.tf.360.cn:443
TCP(TLS/1.0) sf6-ttc####.ps####.com.####.com:443
TCP(TLS/1.0) www.chengzi####.com:443
TCP(TLS/1.0) sdkc####.e.360.cn:443
TCP(TLS/1.0) api.o####.hua####.com:443
TCP(TLS/1.0) api####.me####.com:443
TCP c####.hua####.com.####.com:80
TCP 1####.163.235.72:443

Запросы DNS:

ad.tou####.com
and####.api.36####.com
api####.me####.com
api.o####.hua####.com
apk.d####.com
c####.hua####.com
c####.v.tvfa####.com
d####.360####.com
dsp.tou####.com
i####.sn####.com
lf1-ttc####.ps####.com
lf3-ttc####.ps####.com
lf6-ttc####.ps####.com
m####.me####.com
md.ope####.360.cn
o####.sn####.com
p.s.3####.cn
p0.q####.com
p1.q####.com
p2.q####.com
p3.q####.com
p4.q####.com
p5.q####.com
p6.q####.com
p7.q####.com
p8.q####.com
p9.q####.com
plb####.u####.com
r####.wx.qq.com
s####.s.360.cn
s####.tf.360.cn
s.36####.com
s3.ps####.com
sdk.me####.com
sdkc####.e.360.cn
sf1-ttc####.ps####.com
sf3-ttc####.ps####.com
sf6-ttc####.ps####.com
sh####.me####.com
t####.me####.com
trac####.v.tf.####.cn
u####.u####.com
www.chengzi####.com
x####.v.360.cn

Запросы HTTP GET:

and####.api.36####.com/ads/?muid=####&method=####&ss=####&token=####&ver...
and####.api.36####.com/channel/?method=####&ss=####&token=####&ver=####&...
and####.api.36####.com/cloud/?method=####&m=####&ss=####&token=####&ver=...
and####.api.36####.com/cloud/?method=####&source=####&ss=####&token=####...
and####.api.36####.com/cloud/?method=####&ss=####&token=####&ver=####&ch...
and####.api.36####.com/comment/?url=####&start=####&count=####&method=##...
and####.api.36####.com/coverpage/?id=####&cat=####&method=####&ss=####&t...
and####.api.36####.com/dot/?method=####&type=####&ss=####&token=####&ver...
and####.api.36####.com/player/?method=####&so_ver=####&so_type=####&ss=#...
and####.api.36####.com/plugin/?method=####&source=####&cpuType=####&ss=#...
and####.api.36####.com/push/?method=####&ss=####&token=####&ver=####&ch=...
and####.api.36####.com/tj/?method=####&m=####&ss=####&token=####&ver=###...
and####.api.36####.com/tj/?method=####&ss=####&token=####&ver=####&ch=##...
and####.api.36####.com/tj/?method=####&tid=####&ss=####&token=####&ver=#...
and####.api.36####.com/upgrade/?d=####&ins=####&rel=####&&sdk=####&&m=##...
and####.api.36####.com/welcome/?method=####&ss=####&token=####&ver=####&...
c####.v.tvfa####.com/all
d####.360####.com/360kan/armeabi_android_4.6.15.zip
d####.360####.com/360kan/bestv_7_armV7.apk
d####.360####.com/360kan/cibnTv_plugin_3.0.apk
d####.360####.com/360kan/funshion_1_armV7.apk
d####.360####.com/360kan/mgtv_4_armV7.apk
d####.360####.com/360kan/p-n-freewifi.jar
d####.360####.com/360kan/p-n-safegift_4.0.jar
d####.360####.com/360kan/pptv_8_armV7.apk
d####.360####.com/360kan/sohu_5_armV6.apk
d####.360####.com/360kan/tengxun_2_armV6.apk
dsp.tou####.com/api/max/ads/click?extra=####
dsp.tou####.com/api/max/ads/show?extra=####&price=####
dsp.tou####.com/api/max/ads/show?extra=b####&price=####
m####.me####.com/rtb?type=####&d=####&b=####&p=####&l=####&s=####&m=####...
p1.q####.com/d/inn/07bb78b9/live_interact_qiubite_arrow.png?userid=####&...
p1.q####.com/d/inn/17613149/live_interact_bujiadi_car.png?userid=####&de...
p1.q####.com/d/inn/1a6306ec/live_interact_lunzi_0.png?userid=####&device...
p1.q####.com/d/inn/250042e2/live_interact_qiubite_heart.png?userid=####&...
p1.q####.com/d/inn/299ea142/live_interact_bujiadi_light.png?userid=####&...
p1.q####.com/d/inn/356dc2b2/hj_ui_car_in.png?userid=####&deviceid=####&p...
p1.q####.com/d/inn/4d29ed5b/live_interact_airplain_2.png?userid=####&dev...
p1.q####.com/d/inn/5fc26162/hj_ui_avatar_1.png?userid=####&deviceid=####...
p1.q####.com/d/inn/7067d4e0/hj_ui_avatar_4.png?userid=####&deviceid=####...
p1.q####.com/d/inn/79e06862/live_interact_airplain_1.png?userid=####&dev...
p1.q####.com/d/inn/7b9eb7e3/live_interact_tuhao_tiaofu_juanzhou.png?user...
p1.q####.com/d/inn/7ea1f4c5/live_interact_xiongche_in.png?userid=####&de...
p1.q####.com/d/inn/80e2b494/hj_ui_avatar_6.png?userid=####&deviceid=####...
p1.q####.com/d/inn/8f080acb/live_interact_lunzi_3.png?userid=####&device...
p1.q####.com/d/inn/9233c488/live_interact_lunzi_6.png?userid=####&device...
p1.q####.com/d/inn/9272e49e/live_interact_tuhao_tiaofu.png?userid=####&d...
p1.q####.com/d/inn/b9c216af/hj_ui_avatar_3.png?userid=####&deviceid=####...
p1.q####.com/d/inn/c2f6eca4/hj_ui_avatar_2.png?userid=####&deviceid=####...
p1.q####.com/d/inn/ea956402/live_interact_qiubite.png?userid=####&device...
p1.q####.com/d/inn/ed007161/live_interact_qiubite_flower.png?userid=####...
p1.q####.com/d/inn/fda75de4/hj_ui_car_out.png?userid=####&deviceid=####&...
p1.q####.com/t01d938aaef03089314.jpg
p3.q####.com/t0103cf0445f22e6b25.jpg
p3.q####.com/t0112641a1168b30352.jpg
p3.q####.com/t011728044976599b8f.jpg
p3.q####.com/t0117ef85d5091aed61.jpg
p3.q####.com/t0127da85ca633f1b13.png
p3.q####.com/t012eb968cd4d9d05e2.jpg
p3.q####.com/t013de51f872598e03c.jpg
p3.q####.com/t018558f3f650025636.png
p3.q####.com/t019a09d7bac47c1b28.gif
p3.q####.com/t01b367d87549684a09.jpg
p3.q####.com/t01c2251a8647587725.jpg
p3.q####.com/t01c4089c51b2914bae.gif
p3.q####.com/t01c81e19c8ef416aec.gif
p3.q####.com/t01c83c38a225f61c41.gif
p3.q####.com/t01d017dde89cac3b73.jpg
p3.q####.com/t01d41b58689f03ef1e.png
p3.q####.com/t01e396eb5830942fed.gif
p3.q####.com/t01efa281102cf2eac0.jpg
p3.q####.com/t01f30b7ebb010a5074.jpg
p7.q####.com/d/dy_a2ec4a700c30fd7749dd1571376ecdda.
p7.q####.com/d/inn/02515022/live_interact_tuhao_cloud.png?userid=####&de...
p7.q####.com/d/inn/0f4703a1/hj_ui_avatar_12.png?userid=####&deviceid=###...
p7.q####.com/d/inn/33547277/live_interact_car_8.png?userid=####&deviceid...
p7.q####.com/d/inn/34e49136/live_interact_xiongche_weiyan.png?userid=###...
p7.q####.com/d/inn/382d8ae6/live_interact_car_3.png?userid=####&deviceid...
p7.q####.com/d/inn/3eb2baf7/live_interact_xiongche_weixin.png?userid=###...
p7.q####.com/d/inn/43e73140/live_interact_car_1.png?userid=####&deviceid...
p7.q####.com/d/inn/4567226c/hj_ui_avatar_11.png?userid=####&deviceid=###...
p7.q####.com/d/inn/476cf21e/live_interact_tuhao_building.png?userid=####...
p7.q####.com/d/inn/5175ce49/hj_ui_avatar_10.png?userid=####&deviceid=###...
p7.q####.com/d/inn/891e9b33/hj_ui_avatar_7.png?userid=####&deviceid=####...
p7.q####.com/d/inn/8eeb39a7/live_interact_car_7.png?userid=####&deviceid...
p7.q####.com/d/inn/a3496e91/hj_ui_avatar_8.png?userid=####&deviceid=####...
p7.q####.com/d/inn/a4c196e4/live_interact_qiubite_smoke.png?userid=####&...
p7.q####.com/d/inn/cb237c6f/live_interact_xiongche_out.png?userid=####&d...
p7.q####.com/d/inn/cda7b986/hj_ui_avatar_5.png?userid=####&deviceid=####...
p7.q####.com/d/inn/d468af35/hj_ui_avatar_9.png?userid=####&deviceid=####...
p7.q####.com/d/inn/dfa7476e/live_interact_car_5.png?userid=####&deviceid...
p7.q####.com/d/inn/ef9eb0b7/live_interact_tuhao_plane.png?userid=####&de...
p7.q####.com/t010182be4548619f43.png
p7.q####.com/t0102b386a7fabd9793.jpg
p7.q####.com/t01038550453b99b074.png
p7.q####.com/t0115bb50000ae0673e.png
p7.q####.com/t01362b9ae2838a717b.png
p7.q####.com/t0150b4f14fa04f617f.jpg
p7.q####.com/t016fcb34815ccc5d60.jpg
p7.q####.com/t01710293125e242d86.jpg
p7.q####.com/t0176b9d09d2cc80060.jpg
p7.q####.com/t017c67e4411ad5d181.jpg
p7.q####.com/t01aea4ac82df334681.gif
p7.q####.com/t01bc3520c187a2169f.jpg
p7.q####.com/t01caecd19992424a33.jpg
p7.q####.com/t01cc64a769abea3f43.jpg
p7.q####.com/t01ddf285287a0ae965.jpg
s####.s.360.cn/ak/.html?m2=####
s####.s.360.cn/ak/26657d5ff9020d2abefe558796b99584.html?m2=####
s####.s.360.cn/ak/55a7cf9c71f1c9c495413f934dd1a158.html?m2=####
s.36####.com/android_token_collect.gif?u=####&tn=####&ss=####&token=####...
sf1-ttc####.ps####.com/obj/ad.union.api/25e5c92a7122e5a4337f05f8c68f13c8
sf3-ttc####.ps####.com/obj/ad.union.api/b16c48edbd58c8171f178afd28c9eb45
trac####.v.tf.####.cn/s?type=####&r=####&tid=####&finfo=####&enup=####&m...

Запросы HTTP POST:

p.s.3####.cn/pstat/plog.php
p.s.3####.cn/update/update.php?p=####
sh####.me####.com/adsdk?pver=####&skey=En####
sh####.me####.com/adsdk?pver=####&skey=N5####
sh####.me####.com/adsdk?pver=####&skey=NB####
sh####.me####.com/adsdk?pver=####&skey=UD####
sh####.me####.com/adsdk?pver=####&skey=Zl####
sh####.me####.com/adsdk?pver=####&skey=fM####
sh####.me####.com/adsdk?pver=####&skey=tk####

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/.imprint
/data/data/####/.jg.ic
/data/data/####/01a1415302f139bbc110a926d5498ca064x
/data/data/####/35925aa5d3c1f33f5506fe49b777f504
/data/data/####/612773f8e8d71cb9fbb25460fb7e9158
/data/data/####/7093623c9b12683ab89895031acc60bc
/data/data/####/72e70e48eadd5938b56d86399266a41c
/data/data/####/AKTorchDownload.db
/data/data/####/AKTorchDownload.db-journal
/data/data/####/Alvin2.xml
/data/data/####/ContextData.xml
/data/data/####/GlobalFlag.xml
/data/data/####/QH_DeviceSDK.xml
/data/data/####/QH_SDK_M2.xml
/data/data/####/QH_SDK_UserData.xml
/data/data/####/QH_SDK_UserData26657d5ff9020d2abefe558796b99584.xml
/data/data/####/QH_SDK_UserData26657d5ff9020d2abefe558796b99584.xml.bak
/data/data/####/QH_SDK_sessionID26657d5ff9020d2abefe558796b99584.xml
/data/data/####/UM_PROBE_DATA.xml
/data/data/####/Y29tLnFpaG9vLnZpZGVv.tick.lock
/data/data/####/a==7.4.0&&4.5.0_1532384660116_envelope.log
/data/data/####/ad_percent.xml
/data/data/####/armeabi.zip_0.tmp
/data/data/####/b6d638696b1eabd1b1e91bad423e9016
/data/data/####/bestv_7_armV6.apk_new_0.tmp
/data/data/####/c485d2ed5cc4ce64fcccca710c7a0bb7
/data/data/####/cloud_switch_cache
/data/data/####/com.qihoo.video_preferences.xml
/data/data/####/com.qihoo.video_prefs.xml
/data/data/####/com.qihoo.video_prefs.xml.bak
/data/data/####/core_update
/data/data/####/core_update_locker
/data/data/####/data_0
/data/data/####/data_1
/data/data/####/data_2
/data/data/####/data_3
/data/data/####/device_collector
/data/data/####/device_collector_locker
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/f489f16ba824b8889b64c9d567d33691
/data/data/####/f_000001
/data/data/####/f_000002
/data/data/####/f_000003
/data/data/####/f_000004
/data/data/####/f_000005
/data/data/####/f_000006
/data/data/####/f_000007
/data/data/####/f_000008
/data/data/####/f_000009
/data/data/####/f_00000a
/data/data/####/f_00000b
/data/data/####/f_00000c
/data/data/####/finalcore.jar
/data/data/####/funshion_1_armV6.apk_new_0.tmp
/data/data/####/global.jar
/data/data/####/huajiao_plugin.apk
/data/data/####/i==1.2.0&&4.5.0_1532384658196_envelope.log
/data/data/####/index
/data/data/####/info.xml
/data/data/####/key_dnscache.xml
/data/data/####/libjiagu1806440176.so
/data/data/####/libmediaplayer-armeabi.so
/data/data/####/living.db-journal
/data/data/####/locker
/data/data/####/log_reupload_task
/data/data/####/log_reupload_task_locker
/data/data/####/mediav_settings.xml
/data/data/####/mgtv_4_armV6.apk_new_0.tmp
/data/data/####/null_0.tmp
/data/data/####/p-n-freewifi.jar.lock
/data/data/####/p-n-freewifi.jar_0.tmp
/data/data/####/p-n-safegift.jar.lock
/data/data/####/p-n-safegift.jar_0.tmp
/data/data/####/p.l
/data/data/####/plugin_QH_DeviceSDK.xml
/data/data/####/plugin_QH_SDK_M2.xml
/data/data/####/plugin_QH_SDK_UserData.xml
/data/data/####/plugin_QH_SDK_UserData55a7cf9c71f1c9c495413f934dd1a158.xml
/data/data/####/plugin_com.qihoo.video_preferences.xml
/data/data/####/plugin_v3_-1803242638.jar.lock
/data/data/####/plugins.xml
/data/data/####/pptv_8_armV6.apk_new_0.tmp
/data/data/####/profile_task
/data/data/####/profile_task_locker
/data/data/####/profile_torch_platform
/data/data/####/settings.xml
/data/data/####/settings.xml.bak
/data/data/####/share_roomip.xml
/data/data/####/single_process_offlineSplash_ag5FPw5b8GUD
/data/data/####/single_process_offlineSplash_ag5FPw5b8GUD_locker
/data/data/####/sohu_5_armV6.apk_new_0.tmp
/data/data/####/splash_conf_5FPw5b8GUD
/data/data/####/torch_sdk_config.xml
/data/data/####/torch_sdk_config.xml.bak (deleted)
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/um_pri.xml
/data/data/####/umdat.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/uninstall_apk
/data/data/####/uninstall_apk_locker
/data/data/####/video.db-journal
/data/data/####/waitingDown
/data/data/####/waitingDown_locker
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal
/data/media/####/-1030261265.tmp
/data/media/####/-1157692967.tmp
/data/media/####/-1323613056.tmp
/data/media/####/-1339545799.tmp
/data/media/####/-1405806190.tmp
/data/media/####/-1470785901.tmp
/data/media/####/-1729213187.tmp
/data/media/####/-1841570305.tmp
/data/media/####/-265915128.tmp
/data/media/####/-29606121.tmp
/data/media/####/-301722047.tmp
/data/media/####/-323050950.tmp
/data/media/####/-48359220.tmp
/data/media/####/-542277938.tmp
/data/media/####/-591596594.tmp
/data/media/####/-774938572.tmp
/data/media/####/-840810768.tmp
/data/media/####/._android.dat
/data/media/####/._driver.dat
/data/media/####/._system.dat
/data/media/####/.a.dat
/data/media/####/.adfwe.dat
/data/media/####/.aio.dat
/data/media/####/.cca.dat
/data/media/####/.deviceId
/data/media/####/.iddata
/data/media/####/.nomedia
/data/media/####/.sfp
/data/media/####/.testf
/data/media/####/.umm.dat
/data/media/####/00.apk
/data/media/####/00.apk.tmp
/data/media/####/07f766c4421ac56b41aa7de370737884.0
/data/media/####/1038656416.tmp
/data/media/####/1041082191.tmp
/data/media/####/1080899709
/data/media/####/1124127929.tmp
/data/media/####/1251694618.tmp
/data/media/####/1296205543.tmp
/data/media/####/13521730.tmp
/data/media/####/1364304343.tmp
/data/media/####/1441864797.tmp
/data/media/####/14bfb26b64ae6abd89e2ddae813570e7.0
/data/media/####/1576303190.tmp
/data/media/####/1591998983.tmp
/data/media/####/1610035587.tmp
/data/media/####/1622073705.tmp
/data/media/####/1818344955.tmp
/data/media/####/1861947644.tmp
/data/media/####/18a3a1f153ccb99c17e62c05fd6b5355.0
/data/media/####/2112128350.tmp
/data/media/####/22b024512bda12d4e6f2ff6fb3dc225d.0
/data/media/####/26657d5ff9020d2abefe558796b99584
/data/media/####/26657d5ff9020d2abefe558796b99584 (deleted)
/data/media/####/370264079.tmp
/data/media/####/3a353927b5e9a41176b97466c30d3126.0
/data/media/####/3c63943bddc11aa39cf50b6801d4f7f2.0
/data/media/####/3fbb7720140c0ed161d3f1ca43f91ce1.0
/data/media/####/421629178452def9fb6beaa2f2942157.0
/data/media/####/487a8b75c02579103fbe3732028f6ac5.0
/data/media/####/55255cdfc2f577d212557ec7ae87cc55.0
/data/media/####/55a7cf9c71f1c9c495413f934dd1a158
/data/media/####/55a7cf9c71f1c9c495413f934dd1a158 (deleted)
/data/media/####/58052448.tmp
/data/media/####/588868936994cbf0db336885a03ad3da.0
/data/media/####/59027a5e0bc05c32ef20fd708b04459e.0
/data/media/####/5c53bc6a9c4a57bf08a875bae51aa728.0
/data/media/####/740558118.tmp
/data/media/####/777ca7113d82b9b492484ecda76ab79e.0
/data/media/####/7a297e6fd132d316f2d62bfe1b1bc053.0
/data/media/####/819940764.tmp
/data/media/####/892380089.tmp
/data/media/####/92330de993ae3ecc9f8ad7a837850a99.0
/data/media/####/92ff307e91ab341e1cf422dff73e1712.0
/data/media/####/93909b3021760ac7ddee2bc1839b2bd3.0
/data/media/####/966313209.tmp
/data/media/####/97508c9a60eba01657f99d0b29691a35.0
/data/media/####/975921926.tmp
/data/media/####/Alvin2.xml
/data/media/####/BG_2018_07_23.log
/data/media/####/CR_2018_07_23.log
/data/media/####/ContextData.xml
/data/media/####/NwN
/data/media/####/NwN (deleted)
/data/media/####/Wmw
/data/media/####/Wmw (deleted)
/data/media/####/XoO
/data/media/####/XoO (deleted)
/data/media/####/Y29tLnFpaG9vLnZpZGVv
/data/media/####/_android.dat
/data/media/####/_driver.dat
/data/media/####/_system.dat
/data/media/####/af8bc39aecd97adacd351e4bbd896c61.0
/data/media/####/aio.dat
/data/media/####/b580345a63553874bd231392b0e82517.0
/data/media/####/b670b413b344c67b5842b617d9f8a079.0
/data/media/####/b6b79d93cb5f675eb56e09fdb8ff2017
/data/media/####/b9c3c8f8c43643ef797acb065b809933.0
/data/media/####/bb425291f460ca9ec28c4926dd7cca3c.0
/data/media/####/c031a1ea0a66203d4a9a8d5be5a745ee.0
/data/media/####/c2e3d99680fe72ee7f2c61f7f6a1ea50.0
/data/media/####/cdc7fdabaafc5ee75c576b30d49e485d.0
/data/media/####/cef21508112cc99861cf4f0b3849754b.0
/data/media/####/cf823972d15b8ac56052afd94b2bb3be.0
/data/media/####/d20c9d0b08c8623cb24c02527d66c8d5.0
/data/media/####/dadac99dc93977b50834d6d0e5ab827f.0
/data/media/####/data.lock
/data/media/####/dff1df46b8877b869e7e360b64b4404f.0
/data/media/####/ed7d34bd40e071a1b458b4d389bb3d5c.0
/data/media/####/eee2ac9b643d5c1666e583727238d9a4.0
/data/media/####/f55101933b10d54fa2925da22668db7c.0
/data/media/####/f70a043a037316f47231fa4b1a4309ce.0
/data/media/####/ff475413addb38570705c0bb694c48e4.0
/data/media/####/ff9cdd80802450d831eef060f9f132ef.0
/data/media/####/process_2074
/data/media/####/report.lock
/data/media/####/uninstall_apk_list

Другие:

Запускает следующие shell-скрипты:

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
chmod 755 <Package Folder>/.jiagu/libjiagu1806440176.so
date
df
ls /
ls /dev/socket
ls /sys/class/thermal
ls /system/fonts
mkdir -p <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/
ps
service call iphonesubinfo 1
sh -c cat /proc/meminfo
sh -c cat /proc/sys/kernel/random/uuid
sh -c cat /proc/uptime
sh -c cat /sys/block/mmcblk0/device/cid
sh -c cat /sys/class/net/eth0/address
sh -c cat /sys/class/net/eth1/address
sh -c cat /sys/class/net/eth2/address
sh -c cat <SD-Card>/../../../../../..<SD-Card>/..ccdid
sh -c cat <SD-Card>/../../../../../..<SD-Card>/..ccvid
sh -c cat <SD-Card>/../../../../../..<SD-Card>/._android.dat
sh -c cat <SD-Card>/../../../../../..<SD-Card>/._driver.dat
sh -c cat <SD-Card>/../../../../../..<SD-Card>/._system.dat
sh -c cat <SD-Card>/../../../../../..<SD-Card>/.aio.dat
sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/.ccdid
sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/.ccvid
sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/_android.dat
sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/_system.dat
sh -c cat <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/aio.dat
sh -c cd /proc/;cat cpuinfo
sh -c cd /proc/net/ && cat arp
sh -c cd /proc/self/;cat status
sh -c cd /sys/class/net/eth0/ && cat address
sh -c cd /sys/class/net/wlan0/ && cat address
sh -c echo MERGMjgzNjc0OEUyMkI4MjE1MzU4RTdCRjUwQjUxRUI1RTQ4QUI6NzhERjU5OkQ5MERGRA== > <SD-Card>/../../../../../..<SD-Card>/._driver.dat
sh -c echo MERGMjgzNjc0OEUyMkI4MjE1MzU4RTdCRjUwQjUxRUI1RTQ4QUI6NzhERjU5OkQ5MERGRA== > <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/_driver.dat
sh -c echo NEM2MTM3ODNDOTFBQkJFQkQ4RUJDQUM3NkEwODJBNTUxNTMyMzg0NjYx > <SD-Card>/../../../../../..<SD-Card>/.aio.dat
sh -c echo NEM2MTM3ODNDOTFBQkJFQkQ4RUJDQUM3NkEwODJBNTUxNTMyMzg0NjYx > <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/aio.dat
sh -c echo QjU4NUVFQTBCMEQ3MkI1Mzg5QjM5ODQ1MzQ1NUNFMDMzQzdBQjU6ODg2Qzc4OjI3RERDMw== > <SD-Card>/../../../../../..<SD-Card>/._system.dat
sh -c echo QjU4NUVFQTBCMEQ3MkI1Mzg5QjM5ODQ1MzQ1NUNFMDMzQzdBQjU6ODg2Qzc4OjI3RERDMw== > <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/_system.dat
sh -c echo RDRBRUMwODE4QUE0Qzg2MThFMTM4RTlGRkQwNjA3ODUzQTY4Q0M6QkY4MTE3OjREMDVFQg== > <SD-Card>/../../../../../..<SD-Card>/._android.dat
sh -c echo RDRBRUMwODE4QUE0Qzg2MThFMTM4RTlGRkQwNjA3ODUzQTY4Q0M6QkY4MTE3OjREMDVFQg== > <SD-Card>/../../../../../..<SD-Card>/Android/Data/System/local/_android.dat

Загружает динамические библиотеки:

du
libjiagu1806440176
libvxproto
pl_droidsonroids_gif
security
transcore

Использует следующие алгоритмы для шифрования данных:

AES-CBC-NoPadding
AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
RSA-ECB-PKCS1Padding

Использует следующие алгоритмы для расшифровки данных:

AES-CBC-NoPadding
AES-CBC-PKCS7Padding

Использует специальную библиотеку для скрытия исполняемого байткода.

Осуществляет доступ к информации о геолокации.

Осуществляет доступ к информации о сети.

Осуществляет доступ к информации о телефоне (номер, imei и тд.).

Осуществляет доступ к информации об установленных приложениях.

Добавляет задания в системный планировщик.

Отрисовывает собственные окна поверх других приложений.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней