Android.Triada.4739

Техническая информация

Вредоносные функции:

Выполняет код следующих детектируемых угроз:

Android.Triada.4567
Android.Triada.482.origin

Сетевая активность:

Подключается к:

UDP(DNS) 1####.114.114.114:53
UDP(DNS) 8####.8.4.4:53
TCP(HTTP/1.1) u####.a####.top:80
TCP(HTTP/1.1) ln####.jqshe####.com:80
TCP(HTTP/1.1) res####.a####.top:80
TCP(HTTP/1.1) fff.abcdse####.com:8666
TCP(HTTP/1.1) ysr####.hpi####.com:10259
TCP(HTTP/1.1) daliu####.c####.qini####.com:80
TCP(HTTP/1.1) i####.doub####.com:80
TCP(HTTP/1.1) 47.1####.58.87:10080
TCP(HTTP/1.1) st####.tin####.com:80
TCP(HTTP/1.1) 1####.29.29.29:80
TCP(HTTP/1.1) api.meiju####.net:80
TCP(HTTP/1.1) dic####.hnn####.com:10317
TCP(HTTP/1.1) t####.a####.top:80
TCP(HTTP/1.1) api.minc####.com:80
TCP(HTTP/1.1) chec####.cc:80
TCP(HTTP/1.1) bb####.net:80
TCP(HTTP/1.1) app.a####.top:80
TCP(HTTP/1.1) filt####.a####.top:80
TCP(HTTP/1.1) pic.s####.cn.####.com:80
TCP(HTTP/1.1) mto####.hvf####.com:10259
TCP(HTTP/1.1) i####.doub####.com.####.com:80
TCP(HTTP/1.1) 6z####.njt####.com:10091
TCP(TLS/1.0) img1-do####.b0.a####.com:443
TCP(TLS/1.0) s####.we####.com:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.0) 1####.217.168.202:443
TCP(TLS/1.0) lhyysdk####.oss-cn-####.aliy####.com:443
TCP(TLS/1.0) cjs####.oss-cn-####.aliy####.com:443
TCP(TLS/1.0) i####.doub####.com:443
TCP(TLS/1.0) sf3-ttc####.ps####.com:443
TCP(TLS/1.0) dig.b####.net:443
TCP(TLS/1.0) android####.go####.com:443
TCP(TLS/1.0) i####.doub####.com.####.com:443
TCP(TLS/1.0) instant####.google####.com:443
TCP(TLS/1.0) ssls####.jom####.com:443
TCP(TLS/1.0) md####.google####.com:443
TCP(TLS/1.0) mahu####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) dualsta####.wagbr####.ali####.####.com:443
TCP(TLS/1.0) ps.ssl.q####.com:443
TCP(TLS/1.0) api.icinep####.com:443
TCP(TLS/1.2) 2####.58.208.110:443
TCP(TLS/1.2) 1####.217.17.67:443
TCP(TLS/1.2) 1####.217.168.202:443

Запросы DNS:

360####.org
617.a####.top
617.a####.top.####.8
6z####.njt####.com
a####.xapr####.com
adx####.hvf####.com
and####.google####.com
android####.go####.com
api.icinep####.com
api.meiju####.n####.####.8
api.meiju####.net
api.meiju####.net/
api.minc####.com
api.no4####.com
api.no4####.com.####.8
app.a####.top
bb####.net
chec####.cc
cjs####.oss-cn-####.aliy####.com
dic####.hnn####.com
dig.b####.net
fff.abcdse####.com
filt####.a####.top
g####.bdst####.com
i####.doub####.com
i####.doub####.com
i####.doub####.com
instant####.google####.com
lhyysdk####.oss-cn-####.aliy####.com
ln####.jqshe####.com
mahu####.com
md####.google####.com
mto####.hvf####.com
p####.google####.com
pang####.sn####.com
pic.ha####.com
pic.s####.cn
plb####.u####.com
ps.ssl.q####.com
res####.a####.top
s####.kt####.com
s####.kt####.com.####.8
s####.we####.com
s96.c####.com
sf3-ttc####.ps####.com
st####.tin####.com
t####.a####.top
to####.ctobsn####.com
u####.a####.top
u####.u####.com
ww1.sin####.cn
ysr####.hpi####.com

Запросы HTTP GET:

api.meiju####.net/plugins/80s.json
api.meiju####.net/plugins/kuaikan66.json
api.meiju####.net/plugins/micaitu.json
api.minc####.com/favicon.ico
api.minc####.com/v3/son/200310cnieuwqqwd_encode.js?v=####
api.minc####.com/v3/son/abcds343234sdf8ewr-jawwoichkjhs-190827smqlkdjwiu...
api.minc####.com/v3/son/ping.html?s####
app.a####.top/anshuaControl.json
app.a####.top/api.json
app.a####.top/pingpaiAD.json
chec####.cc/feature/config?platform=####&app_id=####&version_code=####&a...
chec####.cc/jd?a=####&v=####&vc=####&p=####&av=####&d=####
daliu####.c####.qini####.com/share_img.png
filt####.a####.top/filter_control_617.json
i####.doub####.com.####.com/view/photo/s_ratio_poster/public/p2559440149...
i####.doub####.com.####.com/view/photo/s_ratio_poster/public/p2571504716...
i####.doub####.com/large/683cb5a1gy1g1mbi0xz6bj20go08cdg8.jpg
i####.doub####.com/view/photo/s_ratio_poster/public/p2558948000.jpg
i####.doub####.com/view/photo/s_ratio_poster/public/p2602873863.jpg
ln####.jqshe####.com/u/481adanfhaf.zip
pic.s####.cn.####.com/img/5dcface762948.jpg
res####.a####.top/LHYY.png
res####.a####.top/sdk10_2.png
st####.tin####.com/static/ij-cloud/cs/google_analytics_6.aar
t####.a####.top/anshua.json
t####.a####.top/armeabi-v7a/libcretenmv.png
t####.a####.top/req.json
u####.a####.top/617.html

Запросы HTTP HEAD:

api.minc####.com/v3/son/200310cnieuwqqwd_encode.js?v=####
api.minc####.com/v3/son/abcds343234sdf8ewr-jawwoichkjhs-190827smqlkdjwiu...
api.minc####.com/v3/son/ping.html?s####

Запросы HTTP POST:

6z####.njt####.com:10091/wisdom/marking
api.meiju####.net/
api.minc####.com/gtrhdt/gwiuoes
api.minc####.com/v3/son/at/granUa
api.minc####.com/v3/son/ks/gygsk
api.minc####.com/v3/son/log/biz
bb####.net/j1
dic####.hnn####.com:10317/widlth/
dic####.hnn####.com:10317/xkeila/
fff.abcdse####.com:8666/bd/getIp
mto####.hvf####.com:10259/7471fc/
mto####.hvf####.com:10259/xhzsud/
ysr####.hpi####.com:10259/7peta8/

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/.imprint
/data/data/####/.jg.ic
/data/data/####/.jgck
/data/data/####/008da864466be0ca_0
/data/data/####/00993f511c8b1b878830aa908a599c16c3d7ae512bc2c46....0.tmp
/data/data/####/029f3598556c673dec8a8d52ab4d3640.0.tmp
/data/data/####/029f3598556c673dec8a8d52ab4d3640.1.tmp
/data/data/####/0379594a61b0817cd6b2e5e5963abc48.0.tmp
/data/data/####/0379594a61b0817cd6b2e5e5963abc48.1.tmp
/data/data/####/0389ab9faa3d953a_0
/data/data/####/10_2.dex (deleted)
/data/data/####/10_2.dex.flock (deleted)
/data/data/####/10_2.jar
/data/data/####/1398047660
/data/data/####/18873752c3fbe12ffe85ee4952f33c449532fba942089c4....0.tmp
/data/data/####/1ab1a36d887a253edd1fe33ff509a07e.0.tmp
/data/data/####/1ab1a36d887a253edd1fe33ff509a07e.1.tmp
/data/data/####/30cdadfa89db04def13fdd757db510c9cfedc6d5267dcae....0.tmp
/data/data/####/35028982391CEDC44E842EACD979C7E7.dex
/data/data/####/35028982391CEDC44E842EACD979C7E7.dex.flock (deleted)
/data/data/####/36bd1ba46f08b1f74e67523b148cad7501751d6bb3c8789....0.tmp
/data/data/####/37bf58ba0c72b414449835c27f068144405cc64dc09f346....0.tmp
/data/data/####/42e3379b554d697429c03f7f78da57aa.0.tmp
/data/data/####/42e3379b554d697429c03f7f78da57aa.1.tmp
/data/data/####/44367F39739CCD6BBF960E91E7DB78B2.xml
/data/data/####/4643ec5e1c3d664edec76444b838a96a.0.tmp
/data/data/####/4643ec5e1c3d664edec76444b838a96a.1.tmp
/data/data/####/465628ab20f1aed0618a18bc918b7ef66f6ffbf236c139e....0.tmp
/data/data/####/4B8DB6B83129A65A2EF4DCFC1393C3B0.xml
/data/data/####/4abfe83d624f9b9f231ac96820d6a809.0.tmp
/data/data/####/4abfe83d624f9b9f231ac96820d6a809.1.tmp
/data/data/####/4f118e10919f4aceba83a27652ccc452.0.tmp
/data/data/####/4f118e10919f4aceba83a27652ccc452.1.tmp
/data/data/####/51f06189a897969e0d01ee013769bb91.db
/data/data/####/592meiju_data.xml
/data/data/####/6cca847935c8af83b5386c466243959d.0.tmp
/data/data/####/6cca847935c8af83b5386c466243959d.1.tmp
/data/data/####/6f182f23ff9d74e8bc48ee4f8ad28391238807a2c249e7d....0.tmp
/data/data/####/71fe1214442ba6d8_0
/data/data/####/7b3489c666df4c0e837f82c99e4274f3f2f50b5e41b0100....0.tmp
/data/data/####/866eb08c257c31645d4f26c9a47ad80642e1f104f4d0313....0.tmp
/data/data/####/8791e210346208ca65192b3678a32dd6.0.tmp
/data/data/####/8791e210346208ca65192b3678a32dd6.1.tmp
/data/data/####/8EAD111D030291821E19A80E344C340A.xml
/data/data/####/8fd202430b8f7da6_0 (deleted)
/data/data/####/91fec4ca157883e5681809bb9c16d94844aaa1908790a64....0.tmp
/data/data/####/CBGr2.xml
/data/data/####/Cookies-journal
/data/data/####/HttpDNSConstantsJson.xml
/data/data/####/UM_PROBE_DATA.xml
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/_p.xml
/data/data/####/_sh.xml
/data/data/####/bb5e4afa4ec1f59a45520fdf7f12115f.0.tmp
/data/data/####/bb5e4afa4ec1f59a45520fdf7f12115f.1.tmp
/data/data/####/bd_embed_tea_agent.db-journal
/data/data/####/c614d4d317cee99558a5e51c5eebfc31ab429db63276d7b....0.tmp
/data/data/####/cac0fab2e30f8859b243b708ba02b616.dex
/data/data/####/cac0fab2e30f8859b243b708ba02b616.dex.flock (deleted)
/data/data/####/cac0fab2e30f8859b243b708ba02b616.jar
/data/data/####/classes.dex
/data/data/####/classes.dex;classes2.dex
/data/data/####/classes.dex;classes3.dex
/data/data/####/classes.oat
/data/data/####/com.ch.flowerlib.Flower_13.dex
/data/data/####/com.ch.flowerlib.Flower_13.dex.flock (deleted)
/data/data/####/com.ch.flowerlib.Flower_13.dex.tmp
/data/data/####/com.meiju592.app_preferences.xml
/data/data/####/com.ns.nh.Amanda_2.dex
/data/data/####/com.ns.nh.Amanda_2.dex.flock (deleted)
/data/data/####/com.ns.nh.Amanda_2.dex.tmp
/data/data/####/d3115502dea8a437a3ddcfd520cfa9fe.db
/data/data/####/d3115502dea8a437a3ddcfd520cfa9fe.so
/data/data/####/dES.dex
/data/data/####/dES.dex.flock (deleted)
/data/data/####/dES.jar
/data/data/####/dW1weF9pbnRlcm5hbF8xNTk1NTc4NjY5MTEx;
/data/data/####/dW1weF9pbnRlcm5hbF8xNTk1NTc4NjYzMjc0;
/data/data/####/db64144592e6c02b040383ecdf104e9c1d3c316f1fc6c34....0.tmp
/data/data/####/dns_ip_info.db
/data/data/####/dns_ip_info.db-journal
/data/data/####/downUmeng.dex (deleted)
/data/data/####/downUmeng.dex.flock (deleted)
/data/data/####/downUmeng.jar
/data/data/####/downloader.db-journal
/data/data/####/e397dcc2dd63652437cee0fa9473925fa1ff32772f884da....0.tmp
/data/data/####/e904646c89c0de24a0efca919f8cef73.0.tmp
/data/data/####/e904646c89c0de24a0efca919f8cef73.1.tmp
/data/data/####/ef3e3cf75ff31cb0af5d33e45b2eb39d.0.tmp
/data/data/####/ef3e3cf75ff31cb0af5d33e45b2eb39d.1.tmp
/data/data/####/embed_applog_stats.xml
/data/data/####/embed_header_custom.xml
/data/data/####/exchangeIdentity.json
/data/data/####/exid.dat
/data/data/####/f59b8354c2acd1e1e9059cad718b26fa.0.tmp
/data/data/####/f59b8354c2acd1e1e9059cad718b26fa.1.tmp
/data/data/####/fd33dad85ba06efc3a42ea4df2b87351.0.tmp
/data/data/####/fd33dad85ba06efc3a42ea4df2b87351.1.tmp
/data/data/####/fhyzcf.png
/data/data/####/gameid
/data/data/####/gameid.zip
/data/data/####/google_analytics.jar
/data/data/####/google_analytics.jar.dex
/data/data/####/google_analytics.jar.dex.flock (deleted)
/data/data/####/i==1.2.0&&全球VIP绝版_1595578663463_envelope.log
/data/data/####/index
/data/data/####/info.xml
/data/data/####/journal.tmp
/data/data/####/kk_datas_info.xml
/data/data/####/kk_datas_info.xml.bak
/data/data/####/libjiagu.so
/data/data/####/libnms.so
/data/data/####/libtobEmbedEncrypt.so
/data/data/####/libzbmhpo.so
/data/data/####/libzbmhpo.so-32
/data/data/####/libzbmhpo.so-64
/data/data/####/meijuniaoV2.db-journal
/data/data/####/metrics_guid
/data/data/####/npth.xml
/data/data/####/npth_log.db-journal
/data/data/####/pkgConfig.xml
/data/data/####/proc_auxv
/data/data/####/qsudsedq.dex
/data/data/####/qsudsedq.dex.flock (deleted)
/data/data/####/qsudsedq.jar
/data/data/####/snssdk_openudid.xml
/data/data/####/sp_reward_video_adslot.xml
/data/data/####/t==8.0.0&&全球VIP绝版_1595578664421_envelope.log
/data/data/####/temp-index
/data/data/####/the-real-index
/data/data/####/tt_dns_settings.xml
/data/data/####/tt_sdk_settings.xml
/data/data/####/tt_sdk_settings.xml.bak
/data/data/####/ttopenadsdk.xml
/data/data/####/ua.db
/data/data/####/ua.db-journal
/data/data/####/um_pri.xml
/data/data/####/umdat.xml
/data/data/####/umeng_common_config.xml
/data/data/####/umeng_common_location.xml
/data/data/####/umeng_general_config.xml
/data/data/####/umeng_it.cache
/data/data/####/yd_config_c.xml
/data/media/####/.a.dat
/data/media/####/.adfwe.dat
/data/media/####/.cca.dat
/data/media/####/.kkid
/data/media/####/.umm.dat
/data/media/####/.usdis
/data/media/####/081c13a646d3097cd927c3193a66e023.tmp
/data/media/####/0c42618073a19e04b7372a939d9d752e.cache
/data/media/####/0f4e1d5ae60f6339bf30f0a3de1b4923.png
/data/media/####/32298ad2c5918fa2e7adc92371096b36.cache
/data/media/####/35028982391CEDC44E842EACD979C7E7.jar
/data/media/####/35028982391CEDC44E842EACD979C7E7.temp
/data/media/####/46a3fc5d4d41f6251edcffc9a8233cc1.cache
/data/media/####/51d76ac20ff8256575147c67be1bd36a.chche
/data/media/####/59FACF1EB83B89397406DBFC29EC1911
/data/media/####/81b32e3ad1f5e11c9bc15ecce52b08af
/data/media/####/_pn
/data/media/####/_shn
/data/media/####/b42130e58451ceee039f2a2e793aecf3.jpg
/data/media/####/cac0fab2e30f8859b243b708ba02b616
/data/media/####/clientudid.dat
/data/media/####/d700e5a9f7dbb33d5feacda8536c45c9.tmp
/data/media/####/global.xml
/data/media/####/global.xml.bak (deleted)
/data/media/####/httpdns.log
/data/media/####/plcfg.xml
/data/media/####/temp_pkg_info.json
/data/media/####/use.xml
/data/media/####/webadlist_1.xml
/data/media/####/webinfo.xml
/data/media/####/webinfo.xml.bak
/data/misc/####/primary.prof

Другие:

Запускает следующие shell-скрипты:

/system/bin/cat /proc/cpuinfo
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
/system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
/system/bin/dex2oat --instruction-set=x86 --dex-file=<Package Folder>/.jiagu/classes.dex --dex-file=<Package Folder>/.jiagu/classes.dex:classes2.dex --dex-file=<Package Folder>/.jiagu/classes.dex:classes3.dex --oat-file=<Package Folder>/.jiagu/classes.oat --inline-depth-limit=0 --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/.ilvhq/qsudsedq.jar --oat-fd=123 --oat-location=/data/user/0/<Package>/.ilvhq/qsudsedq.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/835efefc/cac0fab2e30f8859b243b708ba02b616.jar --oat-fd=212 --oat-location=/data/user/0/<Package>/cache/835efefc/cac0fab2e30f8859b243b708ba02b616.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/cacheUmeng/oatCache/downUmeng.jar --oat-fd=118 --oat-location=/data/user/0/<Package>/cache/cacheUmeng/oatCache/downUmeng/downUmeng.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/cache/google_analytics.jar.dex --oat-fd=88 --oat-location=/data/user/0/<Package>/files/out/google_analytics.jar.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/cache/cacheUmeng/10_2.jar --oat-fd=98 --oat-location=/data/user/0/<Package>/files/cache/cacheUmeng/10_2.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/com.ch.flowerlib.Flower_13.dex --oat-fd=119 --oat-location=/data/user/0/<Package>/com.ch.flowerlib.Flower_13.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/data/user/0/<Package>/files/com.ns.nh.Amanda_2.dex --oat-fd=118 --oat-location=/data/user/0/<Package>/com.ns.nh.Amanda_2.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=/storage/emulated/0/data/<Package>/files/35028982391CEDC44E842EACD979C7E7.jar --oat-fd=120 --oat-location=/data/user/0/<Package>/files/35028982391CEDC44E842EACD979C7E7.dex --compiler-filter=speed
/system/bin/dex2oat --runtime-arg -classpath --runtime-arg & --instruction-set=x86 --instruction-set-features=smp,ssse3,sse4.1,sse4.2,-avx,-avx2,-lock_add,popcnt --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --dex-file=<Package Folder>/extfiles/dES.jar --oat-fd=122 --oat-location=<Package Folder>/extfiles/dES.dex --compiler-filter=speed
cat /proc/version
cat /sys/class/net/wlan0/address
getprop
getprop ro.board.platform
getprop ro.build.version.emui
getprop ro.build.version.opporom
getprop ro.gn.sv.version
getprop ro.lenovo.lvp.version
getprop ro.letv.release.version
getprop ro.miui.ui.version.name
getprop ro.product.cpu.abi
getprop ro.smartisan.version
getprop ro.vivo.os.build.display.id
getprop ro.vivo.os.version
getprop ro.yunos.build.version
ls /
ls /sys/class/thermal
mount
sh

Использует следующие алгоритмы для шифрования данных:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
DES
DES-ECB-NoPadding
RSA-None-PKCS1Padding

Использует следующие алгоритмы для расшифровки данных:

AES-CBC-PKCS5Padding
AES-CBC-PKCS7Padding
AES-ECB-PKCS5Padding
DES
DES-CBC-PKCS5Padding
DES-ECB-NoPadding
RSA-None-PKCS1Padding

Осуществляет доступ к приватному интерфейсу ITelephony.

Использует специальную библиотеку для скрытия исполняемого байт-кода.

Получает информацию о местоположении.

Получает информацию о сети.

Получает информацию о телефоне (номер, IMEI и т. д.).

Получает информацию об установленных приложениях.

Добавляет задания в системный планировщик.

Отрисовывает собственные окна поверх других приложений.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней