Android.Packed.52203

Техническая информация

Вредоносные функции:

Выполняет код следующих детектируемых угроз:

Android.DownLoader.860.origin
Android.DownLoader.861.origin

Сетевая активность:

Подключается к:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) v.adma####.com.cn:80
TCP(HTTP/1.1) 47.1####.40.225:80
TCP(HTTP/1.1) anal####.howq####.cn:8106
TCP(HTTP/1.1) a.v####.cn:80
TCP(HTTP/1.1) st3.wagbr####.adverti####.####.com:80
TCP(HTTP/1.1) and####.b####.qq.com:80
TCP(HTTP/1.1) dsp.tou####.com.####.net:80
TCP(HTTP/1.1) 47.97.2####.214:80
TCP(HTTP/1.1) log.yex.yo####.com:80
TCP(HTTP/1.1) 47.1####.44.93:80
TCP(HTTP/1.1) u####.8####.com:80
TCP(HTTP/1.1) 47.1####.81.46:80
TCP(HTTP/1.1) p####.howq####.cn:8809
TCP(HTTP/1.1) w####.pcon####.com.cn:80
TCP(HTTP/1.1) l####.tbs.qq.com:80
TCP(HTTP/1.1) trac####.v.tf.####.cn:80
TCP(HTTP/1.1) mt.h####.com:80
TCP(HTTP/1.1) a.e####.cn:80
TCP(HTTP/1.1) rd.e.s####.com:80
TCP(HTTP/1.1) qzones####.g####.cn.####.com:80
TCP(HTTP/1.1) m####.me####.com:80
TCP(HTTP/1.1) src.r####.com:80
TCP(HTTP/1.1) luna-im####.qq.com.####.com:80
TCP(HTTP/1.1) en####.liandao####.com:80
TCP(HTTP/1.1) p####.ugd####.com.####.com:80
TCP(HTTP/1.1) sf1-ttc####.ps####.com:80
TCP(HTTP/1.1) sf3-ttc####.ps####.com:80
TCP(HTTP/1.1) j####.lie####.cn:80
TCP(HTTP/1.1) i.r.yu####.mobi:80
TCP(HTTP/1.1) a####.exc.mob.com:80
TCP(HTTP/1.1) 1####.31.213.162:80
TCP(HTTP/1.1) ap####.adi####.com:80
TCP(HTTP/1.1) api.sdk.f####.cn:80
TCP(HTTP/1.1) www.howq####.cn:80
TCP(HTTP/1.1) s####.zhangxi####.com:80
TCP(HTTP/1.1) sdk.c####.com:80
TCP(HTTP/1.1) s####.e.qq.com:80
TCP(HTTP/1.1) s####.51ad####.com:80
TCP(HTTP/1.1) o####.ad####.cn:80
TCP(HTTP/1.1) ss.my####.com:80
TCP(TLS/1.0) ti####.c####.l####.####.com:443
TCP(TLS/1.0) et2-na6####.wagbr####.ali####.####.com:443
TCP(TLS/1.0) dig.b####.net:443
TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
TCP(TLS/1.0) sf1-ttc####.ps####.com:443
TCP(TLS/1.0) sf3-ttc####.ps####.com:443
TCP(TLS/1.0) s####.e.qq.com:443
TCP(TLS/1.0) bds.sn####.com:443
TCP(TLS/1.0) www.howq####.cn:443
TCP(TLS/1.0) st3.wagbr####.adverti####.####.com:443
TCP(TLS/1.0) mi.g####.qq.com:443
TCP(TLS/1.0) sf6-ttc####.ps####.com.####.com:443
TCP(TLS/1.0) bj####.j####.cn:443
TCP(TLS/1.0) dynamic####.sn####.com.####.com:443
TCP(TLS/1.0) t####.m.qq.com:443
TCP(TLS/1.0) d####.c####.l####.####.com:443
TCP 1####.232.25.190:21004
UDP s.j####.cn:19000
TCP 1####.230.236.21:7003
UDP p####.howq####.cn:8087
TCP ap####.adi####.com:80

Запросы DNS:

2####.i####.com
a####.exc.mob.com
a.e####.cn
a.v####.cn
an####.l####.com
anal####.howq####.cn
and####.b####.qq.com
ap####.adi####.com
api.sdk.f####.cn
api.xiaoshu####.com
bds.sn####.com
bj####.j####.cn
dig.b####.net
dl.mfbi####.com
dsp-i####.yo####.com
dsp.tou####.com
en####.liandao####.com
i.r.yu####.mobi
i.sn####.com
imgc####.qq.com
is.sn####.com
j####.lie####.cn
l####.tbs.qq.com
log.yex.yo####.com
m####.me####.com
mi.g####.qq.com
mt.h####.com
o####.ad####.cn
p####.howq####.cn
p####.howq####.cn
p####.ugd####.com
pic.fantu####.cn
plb####.u####.com
qzones####.g####.cn
rd.e.s####.com
s####.51ad####.com
s####.e.qq.com
s####.sn####.com
s####.zhangxi####.com
s.j####.cn
s2.z####.cn
sdk.c####.com
sf1-ttc####.ps####.com
sf3-ttc####.ps####.com
sf6-ttc####.ps####.com
sis.j####.io
src.r####.com
ss.my####.com
t####.m.qq.com
to####.ctobsn####.com
trac####.v.tf.####.cn
u####.8####.com
u####.u####.com
u####.umengc####.com
v.adma####.com.cn
w####.pcon####.com.cn
www.howq####.cn

Запросы HTTP GET:

a.e####.cn/public/getClickUrlPoList.shtml?orientation=####&os=####&model...
a.e####.cn/public/rab.shtml?id=####&network=####&machine=####
a.e####.cn/public/showUrlVisit.shtml?os=####&osversion=####&appversion=#...
a.v####.cn/se?e=MTU3O####&t=####
anal####.howq####.cn:8106/config/Android.conf
ap####.adi####.com/tj?key=####&rd=####&req=####&token=####
ap####.adi####.com/tj?key=####&rd=####&req=YWR####&token=####
api.sdk.f####.cn/v2/initUrl?appId=####
dsp.tou####.com.####.net/api/sougou/ads/show?extra=####&price=F####
dsp.tou####.com.####.net/api/sougou/ads/show?extra=####&price=q####
en####.liandao####.com/ssp/displayNotice?reqId=####
i.r.yu####.mobi/?s=YWs9M####&adslot_id=####&ak=####
log.yex.yo####.com/it?yexi=####&yexcb=####&yext=####&yexv=####&iid=####&...
log.yex.yo####.com/k.gif?yd_ewp=####&yd_ext=####&iid=####&sid=####&tid=#...
luna-im####.qq.com.####.com/qzone/biz/gdt/mod/android/AndroidAllInOne/pr...
m####.me####.com/rtb?type=####&v=####&k=FtxeZ####&ver=####&m=####&exp=##...
m####.me####.com/rtb?type=####&v=####&k=lEld3####&ver=####&m=####&exp=##...
mt.h####.com/tracker?trackertype=####&slotid=####&rid=####&ts=####&b=###...
o####.ad####.cn/agent/openDisplay.do?st=####&m_lat=####&uuidEncType=####...
p####.howq####.cn:8809/2019.ip138.com/ic.asp
p####.ugd####.com.####.com/gdt/0/DAA2_lVAUAALQABdBd05JRBP-1eH_m.jpg/0?ck...
p####.ugd####.com.####.com/gdt/0/DAA32tbAIAAIAAAlBeHCcIAl3ZTkaF.jpg/0?ck...
qzones####.g####.cn.####.com/qzone/biz/gdt/mob/sdk/v2/android03/js-relea...
rd.e.s####.com/nvw?traceId=####&st=BR2g####
s####.51ad####.com/ad/show?adtype=####&adid=####&adclass=####&os=####&re...
s####.zhangxi####.com/v1/report?action=####&sign=####&sdata=####
sf1-ttc####.ps####.com/img/ad.union.api/42b5853e8f5d96aee62f45c9fb0e48e0...
sf1-ttc####.ps####.com/img/ad.union.api/4cdfd4bfabc302b18026e783b6d1fbd5...
sf3-ttc####.ps####.com/ims?kt=####&at=####&key=####&sign=yx####&tv=####&...
sf3-ttc####.ps####.com/ims?kt=####&at=####&key=aHR####&sign=yx####&tv=##...
src.r####.com/kubo/dex/hh_9.0_145.dex
ss.my####.com/event/1/31e3bc1e9e024d3f9879201016a0a341/?aId=####&adExtIn...
st3.wagbr####.adverti####.####.com/sc/1/channel/channel/?format=####&q=#...
trac####.v.tf.####.cn/s?type=####&r=####&tid=####&finfo=####&enup=####&m...
u####.8####.com/monitor/common/1?tid=####&rsid=####&s=####&inf=####&si=#...
v.adma####.com.cn/i/a121625,b3153305,c2223,i0,m202,8a2,8b2,h
w####.pcon####.com.cn/ipJson.jsp
www.howq####.cn/bountysys/task/getBountyMsg?sign=####&timestamp=####&int...
www.howq####.cn/fantuan/advertisement/getlist?sign=####&packageid=####&t...
www.howq####.cn/fantuan/banner/bannerlist?sign=####&timestamp=####&inter...
www.howq####.cn/fantuan/banner/bannertableplaquelist?sign=####&timestamp...
www.howq####.cn/fantuan/bookrack/getBookrackWithNologin?sign=####&timest...
www.howq####.cn/fantuan/domain/getDomainShield
www.howq####.cn/fantuan/rule_v2/getRuleUrl
www.howq####.cn/fantuan/user/getThemes?sign=####&timestamp=####&interfac...
www.howq####.cn/mallsys/user/getAccountInfo?sign=####&timestamp=####&int...

Запросы HTTP POST:

a####.exc.mob.com/errconf
anal####.howq####.cn:8106/sa?project=####
and####.b####.qq.com/rqd/async?aid=####
j####.lie####.cn/v2/cp?appId=####
l####.tbs.qq.com/ajax?c=####&k=####
s####.e.qq.com/activate
sdk.c####.com/versiontapi.php?v=####&type=####
www.howq####.cn/fantuan/book/bookDetailsV2
www.howq####.cn/fantuan/config/getConfig

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/-1127729055-1266689676
/data/data/####/.bak
/data/data/####/.duid
/data/data/####/.imprint
/data/data/####/.jg.ic
/data/data/####/.lock
/data/data/####/.turing.dat
/data/data/####/.vpl_lock
/data/data/####/0357068c-cbf2-4cf5-92a1-e79c0c20f17b
/data/data/####/0ec87f5d-f220-4376-acf7-74f8fee2e013
/data/data/####/1002
/data/data/####/1004
/data/data/####/1021689741840853517
/data/data/####/141bee8b-9e97-4ea8-ba90-dfe2c04e8a31
/data/data/####/1905d0b9-dac6-4e64-8e82-bf37b2a662a7
/data/data/####/202a03a82b83f0d245f44dc209890d7f.xml
/data/data/####/2288.yaqcookie
/data/data/####/2D72A071.dex
/data/data/####/352aede8-ea00-4b62-bc2f-437070d70ffe
/data/data/####/55d64e9c-1dad-4d42-b7bf-215a8f17c0bd
/data/data/####/60fdd42f-62f2-49dc-80be-ff53966895be
/data/data/####/646fe2734451bbf9ba56f76935882aa9
/data/data/####/646fe2734451bbf9ba56f76935882aa9.tmp
/data/data/####/6a68040d-bf46-4941-b93e-9a88a083b5b1
/data/data/####/6ef2694d-8398-448d-a80e-bc08c6704e47
/data/data/####/7cbb7ece-d912-47a7-a9b2-66d0f616a212
/data/data/####/94db1283-bb00-41ef-8c6d-6b4c5077ce29
/data/data/####/AdmobileApiAd_3.9.2.dex (deleted)
/data/data/####/Alvin2.xml
/data/data/####/AndroidLogPlusXl_5.7.2.dex (deleted)
/data/data/####/ApplicationCache.db-journal
/data/data/####/BUGLY_COMMON_VALUES.xml
/data/data/####/BuglySdkInfos.xml
/data/data/####/ContextData.xml
/data/data/####/CookiePrefsFile.xml
/data/data/####/GDTSDK.db
/data/data/####/GDTSDK.db-journal
/data/data/####/IpInfos.xml
/data/data/####/LY_AD_KEY.xml
/data/data/####/MultiDex.lock
/data/data/####/Novel.db-journal
/data/data/####/Push_Page_Config.xml
/data/data/####/TRANS_CONFIG.xml
/data/data/####/ThrowalbeLog.db-journal
/data/data/####/UM_PROBE_DATA.xml
/data/data/####/WapToPc.json
/data/data/####/a9b0c3a11cc5d3d1c99ab9b8cdd03795
/data/data/####/a9b0c3a11cc5d3d1c99ab9b8cdd03795.tmp
/data/data/####/a==8.0.2&&1.30.5_1579046350174_envelope.log
/data/data/####/ad_persistence.xml
/data/data/####/ad_strategy.db-journal
/data/data/####/app_crash_copy.xml
/data/data/####/ax_c.xml
/data/data/####/bal.catch
/data/data/####/bc.config
/data/data/####/bd_embed_tea_agent.db-journal
/data/data/####/bugly_db_-journal
/data/data/####/bwc.catch
/data/data/####/bytedance_downloader.db-journal
/data/data/####/cae390d4-7c85-464d-a7ed-e86427ce1781
/data/data/####/cid
/data/data/####/cn.jiguang.common.xml
/data/data/####/cn.jiguang.sdk.address.xml
/data/data/####/cn.jiguang.sdk.share.profile.xml
/data/data/####/cn.jiguang.sdk.user.profile.xml
/data/data/####/cn.jiguang.sdk.user.set.profile.xml
/data/data/####/cn.jpush.android.user.profile.xml
/data/data/####/cn.jpush.config.xml
/data/data/####/cn.jpush.preferences.v2.rid.xml
/data/data/####/cn.jpush.preferences.v2.xml
/data/data/####/com.ciba.data.xml
/data/data/####/com.fantuantanshujbk.BETA_VALUES.xml
/data/data/####/com.fantuantanshujbk.BETA_VALUES.xml.bak (deleted)
/data/data/####/com.qq.e.sdkconfig.xml
/data/data/####/com.sensorsdata.analytics.android.sdk.SensorsDa...ml.bak
/data/data/####/com.sensorsdata.analytics.android.sdk.SensorsDataAPI.xml
/data/data/####/content_trans_rule_v2.json
/data/data/####/core_info
/data/data/####/crashrecord.xml
/data/data/####/d77d9fb9-82ca-4cb6-a6e4-a53e58a98745
/data/data/####/dW1weF9pbnRlcm5hbF8xNTc5MDQ2MzQ2MDQz;
/data/data/####/data_0
/data/data/####/data_1
/data/data/####/data_2
/data/data/####/data_3
/data/data/####/debug.conf
/data/data/####/devCloudSetting.cfg
/data/data/####/devCloudSetting.sig
/data/data/####/dir-map.xml
/data/data/####/disposable-res.xml
/data/data/####/download_upload
/data/data/####/ef992fb2-08cc-4c27-bddf-de2fcbe7838e
/data/data/####/embed_applog_stats.xml
/data/data/####/embed_last_sp_session.xml
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/f4543a9c-5147-4b42-8741-b0c820ba57ce
/data/data/####/f_000001
/data/data/####/f_000002
/data/data/####/fcf16ff3-4eba-4cb9-9950-716775e4d832
/data/data/####/gdt_config.cfg
/data/data/####/gdt_plugin.jar
/data/data/####/gdt_plugin.jar.sig
/data/data/####/gdt_plugin.next.sig
/data/data/####/gdt_plugin.tmp
/data/data/####/gdt_stat.db
/data/data/####/gdt_stat.db-journal
/data/data/####/gdt_suid
/data/data/####/gg.dex
/data/data/####/global-info.xml
/data/data/####/i==1.2.0&&1.30.5_1579046346145_envelope.log
/data/data/####/index
/data/data/####/info.xml
/data/data/####/init_urls.xml
/data/data/####/libMMANDKSignature.29f3d6aa.so
/data/data/####/libjiagu1394616514.so
/data/data/####/libturingau.29f3d6aa.so
/data/data/####/libyaqbasic.29f3d6aa.so
/data/data/####/libyaqpro.29f3d6aa.so
/data/data/####/list_rule_v2.json
/data/data/####/local_crash_lock
/data/data/####/mc145.dex
/data/data/####/mc_cache.xml
/data/data/####/mob_commons_1
/data/data/####/mob_sdk_exception_1
/data/data/####/mpdc
/data/data/####/msg_queue_v330
/data/data/####/multidex.version.xml
/data/data/####/native_record_lock
/data/data/####/personal-info.xml
/data/data/####/push_stat_cache.json
/data/data/####/readsetting.xml
/data/data/####/rl.catch
/data/data/####/sdkCloudSetting.cfg
/data/data/####/sdkCloudSetting.sig
/data/data/####/security_info
/data/data/####/sensorsdata-journal
/data/data/####/sensorsdata.xml
/data/data/####/snssdk_openudid.xml
/data/data/####/sp_ft_uuid.xml
/data/data/####/sp_push_time.xml
/data/data/####/systemHeads.xml
/data/data/####/t==8.0.2&&1.30.5_1579046349139_envelope.log
/data/data/####/tbs_download_config.xml
/data/data/####/tbs_download_stat.xml
/data/data/####/tbs_pv_config
/data/data/####/tbscoreinstall.txt
/data/data/####/tbslock.txt
/data/data/####/tt_dns_settings.xml
/data/data/####/tt_sdk_settings.xml
/data/data/####/tt_sp_app_list.xml
/data/data/####/ttopenadsdk.xml
/data/data/####/ttopensdk.db-journal
/data/data/####/turingfd_conf_105498_34_audienceMini.xml
/data/data/####/turingfd_protect_105498_34_audienceMini.xml
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/um_pri.xml
/data/data/####/umdat.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_common_location.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/update.xml
/data/data/####/update_lc
/data/data/####/webview.db-journal
/data/data/####/webviewCookiesChromium.db-journal
/data/data/####/webviewCookiesChromium.db-journal (deleted)
/data/data/####/yaq.29f3d6aa.sec
/data/data/####/yaq2.29f3d6aa.sec
/data/data/####/yaq3_0.29f3d6aa.sec
/data/data/####/yaqsdkcookie
/data/media/####/.3deaedc28469674418c57af6b7cc832b
/data/media/####/.78af709d2e56b347d81524b0f32c0ecb-temp-1579046340189
/data/media/####/.a.dat
/data/media/####/.adfwe.dat
/data/media/####/.artc_lock
/data/media/####/.bs_lock
/data/media/####/.cca.dat
/data/media/####/.di
/data/media/####/.dic_lock
/data/media/####/.du_lock
/data/media/####/.duid
/data/media/####/.globalLock
/data/media/####/.gm_lock
/data/media/####/.im_lock
/data/media/####/.lesd_lock
/data/media/####/.mn_1360822780
/data/media/####/.nomedia
/data/media/####/.pkg_lock
/data/media/####/.pkgs_lock
/data/media/####/.push_deviceid
/data/media/####/.rc_lock
/data/media/####/.slw
/data/media/####/.ss_lock
/data/media/####/.turing.dat
/data/media/####/.umm.dat
/data/media/####/07cc44a59a2c4e0f7b73549f054cb3ea.tmp
/data/media/####/12gfeaojbu8jh6xasj1ol5ihr.0.tmp
/data/media/####/12wqe4uc7d0q81uwmihenvsrs.0.tmp
/data/media/####/16d14q3ft1a86a5ex4mk7x7vw.0.tmp
/data/media/####/1b1axd8mnyfwurfb8r3dw9k0e.0.tmp
/data/media/####/1f5c7s1317jcsefcosvbttebm.0.tmp
/data/media/####/1jpupjvqf3hx4whkdimshwlk6.0.tmp
/data/media/####/1rgewcz8050ovvi8mpmufsevg.0.tmp
/data/media/####/1wozwlqk9b9l8gpzcx002x9x8.0.tmp
/data/media/####/1yu6u2b2aqg6cjwgbpujwe5jm.0.tmp
/data/media/####/24vinhpphnyy9y4yf7959wwl3.0.tmp
/data/media/####/2lwudc97pcn1vx0ufgr48wz7p.0.tmp
/data/media/####/2mwytjwj17xgfc5gdf8krmtft.0.tmp
/data/media/####/2ttcps0lvpzsgff7780mbpmd3.0.tmp
/data/media/####/30wegadccjwiwyks8z1ff265u.0.tmp
/data/media/####/32m42abz6tbureb0frcda1x9r.0.tmp
/data/media/####/3ds3dzcxulfi5utfehiuxmqd5.0.tmp
/data/media/####/3n9u9x4anhj2s9uogdt620anz.0.tmp
/data/media/####/49qqyeyaw220xwn5pnlrqstye.0.tmp
/data/media/####/4kgo79pl3gk6d6punqgyl2wwe.0.tmp
/data/media/####/4n0i3q8sg5cd7swq18t7qvykx.0.tmp
/data/media/####/4o77565pnchflahh4jhnd8wam.0.tmp
/data/media/####/50c01294df9d48902639978235bcb56c4d0f01b1477b46...19.mp3
/data/media/####/512nx1u85n7dy7t8hc2u2y2c2.0.tmp
/data/media/####/5b729ykfrqq9nm219732zprgk.0.tmp
/data/media/####/5eb63bbbe01eeed093cb22bb8f5acdc34d0f01b1477b46...19.png
/data/media/####/5f57sxs3o3l5qnm3rlxgov3rq.0.tmp
/data/media/####/5gpkqkk7c4odfbtmellm0374w.0.tmp
/data/media/####/5rrkwr07yt9qdot686byf20fl.0.tmp
/data/media/####/5xdf54ekh0aamc3u95dhdu7a7.0.tmp
/data/media/####/5ypc9wuyw0y5uofdvfuimtptv.0.tmp
/data/media/####/606nzrg6yp9uhv390rhyzxzs1.0.tmp
/data/media/####/63wct2tcvnfhx00gr6ht2zkm2.0.tmp
/data/media/####/6uqs10zwn31ug5tt1hxbosk7b.0.tmp
/data/media/####/71w6jmvpc249i61yo2n7e1axs.0.tmp
/data/media/####/77vb5exa5gj9sz8q0di4tibcp.0.tmp
/data/media/####/79qdkfefz3qdjrc6whosbi2ed.0.tmp
/data/media/####/7ctyeyqf7jjhmv72tjx5i94n9.0.tmp
/data/media/####/7khsye3gigstakkq7zc1c90k0.0.tmp
/data/media/####/971d8787eb094978eccc750287bcdb17.tmp
/data/media/####/Alvin2.xml
/data/media/####/ContextData.xml
/data/media/####/bh8ddkqjpf38ui41otbla0cq.0
/data/media/####/clientudid.dat
/data/media/####/diskcache-23213ed38776fe4110860e607d2be291-tem...379031
/data/media/####/getConfig{}-temp-1579046349121
/data/media/####/getDomainShield-temp-1579046349049
/data/media/####/journal.tmp
/data/media/####/mjkgg4szj99vcpenmavn3h44.0.tmp
/data/media/####/temp_pkg_info.json

Другие:

Запускает следующие shell-скрипты:

/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
/system/bin/df
/system/bin/getprop
/system/bin/sh -c getprop
<Package Folder>/files/cid
app_process /system/bin com.android.commands.pm.Pm list package -3
cat /sys/class/net/wlan0/address
chmod 777 <Package Folder>/files/cid
getprop
getprop ro.build.version.emui
getprop ro.build.version.opporom
getprop ro.letv.release.version
getprop ro.miui.ui.version.name
getprop ro.product.cpu.abi
getprop ro.smartisan.version
getprop ro.vivo.os.build.display.id
getprop ro.vivo.os.version
ls /
ls /sys/class/thermal
pm list package -3
ps
sh

Загружает динамические библиотеки:

2D72A071
Bugly
X86Bridge
libMMANDKSignature.29f3d6aa
libjiagu1394616514
libturingau.29f3d6aa
libyaqbasic.29f3d6aa
libyaqpro.29f3d6aa
native-lib
nms
tobEmbedEncrypt

Использует следующие алгоритмы для шифрования данных:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
AES-ECB-PKCS7Padding
AES-GCM-NoPadding
RSA-ECB-NoPadding
RSA-ECB-PKCS1Padding

Использует следующие алгоритмы для расшифровки данных:

AES
AES-CBC-PKCS7Padding
AES-ECB-NoPadding
AES-ECB-PKCS5Padding
AES-ECB-PKCS7Padding
AES-GCM-NoPadding
DES-CBC-PKCS5Padding
RSA-ECB-PKCS1Padding
RSA-NONE-PKCS1Padding

Осуществляет доступ к приватному интерфейсу ITelephony.

Использует специальную библиотеку для скрытия исполняемого байт-кода.

Получает информацию о местоположении.

Получает информацию о сети.

Получает информацию о телефоне (номер, IMEI и т. д.).

Получает информацию об установленных приложениях.

Получает информацию о запущенных приложениях.

Получает информацию о привязанных к устройству аккаунтах (Google, Facebook и т. д.).

Добавляет задания в системный планировщик.

Отрисовывает собственные окна поверх других приложений.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней