Android.RemoteCode.7739

Техническая информация

Вредоносные функции:

Выполняет код следующих детектируемых угроз:

Android.RemoteCode.337.origin

Сетевая активность:

Подключается к:

UDP(DNS) 8####.8.4.4:53
TCP(HTTP/1.1) cdn-im####.lud####.com:80
TCP(TLS/1.0) innerac####.s3-eu-w####.amazo####.com:443
TCP(TLS/1.0) tls.vu####.edges####.net:443
TCP(TLS/1.0) api-acc####.edges####.net:443
TCP(TLS/1.0) sdk-ev####.inner-a####.mobi:443
TCP(TLS/1.0) app.ad####.com:443
TCP(TLS/1.0) dualspa####.com:443
TCP(TLS/1.0) reg####.app-mea####.com:443
TCP(TLS/1.0) 1####.251.36.42:443
TCP(TLS/1.0) gmscomp####.google####.com:443
TCP(TLS/1.0) rr3---s####.g####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) android####.adco####.com:443
TCP(TLS/1.0) fk-conf####.ray####.com:443
TCP(TLS/1.0) firebas####.google####.com:443
TCP(TLS/1.0) eve####.adco####.com:443
TCP(TLS/1.0) f####.gst####.com:443
TCP(TLS/1.0) events####.adco####.com:443
TCP(TLS/1.0) ms.appl####.com.####.net:443
TCP(TLS/1.0) api.face####.com:443
TCP(TLS/1.0) cdn-inn####.edg####.net:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.0) adc3-la####.adco####.com:443
TCP(TLS/1.0) app-mea####.com:443
TCP(TLS/1.0) googl####.g.doublec####.net:443
TCP(TLS/1.0) rr5---s####.g####.com:443
TCP(TLS/1.2) 1####.217.168.195:443
TCP(TLS/1.2) 1####.250.179.174:443
TCP(TLS/1.2) 1####.251.36.42:443
UDP rr5---s####.g####.com:443
UDP p####.google####.com:443
UDP rr3---s####.g####.com:443
TCP s.dualspa####.com:443
TCP 1####.251.36.42:443
TCP analyti####.minte####.net:9377
UDP 1####.251.36.42:443
TCP arm.lc####.cn:10020

Запросы DNS:

adc-ad-####.ad####.com
adc3-la####.adco####.com
ads.api.vu####.com
analyti####.minte####.net
and####.google####.com
android####.adco####.com
api.vu####.com
app-mea####.com
app.ad####.com
arm.lc####.cn
c####.inner-a####.mobi
c4d####.adco####.com
cd####.vu####.com
cdn-im####.lud####.com
confi####.ray####.com
dualspa####.com
eve####.adco####.com
events####.adco####.com
f####.gst####.com
firebas####.google####.com
g####.face####.com
gmscomp####.google####.com
googl####.g.doublec####.net
innerac####.s3-eu-w####.amazo####.com
ms.appl####.com
p####.google####.com
reg####.app-mea####.com
rr3---s####.g####.com
rr3---s####.g####.com
rr5---s####.g####.com
rt.appl####.com
s.dualspa####.com
sdk-ev####.inner-a####.mobi

Запросы HTTP GET:

api.face####.com:443/v3.2/132912770718858/mobile_sdk_gk?fields=####&form...
api.face####.com:443/v3.2/132912770718858?fields=####&format=####&advert...
api.face####.com:443/v3.2/132912770718858?fields=####&format=####&sdk=####
cdn-im####.lud####.com/c/201810/19/5bc9756d4788c.jpg
cdn-im####.lud####.com/c/201901/08/5c346d207f872.jpg
cdn-im####.lud####.com/c/201911/12/5dca904a4aa75.jpg
cdn-im####.lud####.com/c/201911/12/5dca916cd916f.jpg
cdn-im####.lud####.com/c/202007/02/5efd9f3337f9b.png
cdn-im####.lud####.com/c/202107/06/60e444a734216.jpg

Запросы HTTP POST:

api.face####.com:443/v3.2/132912770718858/activities
app.ad####.com:443/session
dualspa####.com:443/api?token=####

Изменения в файловой системе:

Создает следующие файлы:

/data/data/####/.cl
/data/data/####/.jg.ac
/data/data/####/0.xml
/data/data/####/026ae9c9824b3e483fa6c71fa88f57ae27816141
/data/data/####/05021bc928410f4808d53f17bff79b94.js
/data/data/####/0dbae666-f2b0-4ef0-be96-7cb75ee49b1f.js
/data/data/####/1114f8a35b28bf051009090601c052cf.js
/data/data/####/1633031840514.dex
/data/data/####/1633031840514.dex.flock (deleted)
/data/data/####/1633031840514.jar
/data/data/####/1633031840514.tmp
/data/data/####/1977133ae333f521cf024f81109cbfc4.js
/data/data/####/211c3445-25ee-4b87-893b-498d3ddd3f5f
/data/data/####/232632c5e1cc78a9a0ce6934c37ef6e2
/data/data/####/232632c5e1cc78a9a0ce6934c37ef6e2.tmp
/data/data/####/232632c5e1cc78a9a0ce6934c37ef6e2.tmp (deleted)
/data/data/####/35a66f7c-4e51-400c-b198-81dbabb12edd.png
/data/data/####/4.5-stars.svg
/data/data/####/422de421e0f4e019426b9abfd780746bc40740eb
/data/data/####/4Od5mlOkKMGBwss03FnWf1z0PnACHJsPJqCf73k1yB0=
/data/data/####/4Od5mlOkKMGBwss03FnWf1z0PnACHJsPJqCf73k1yB0=.vng_meta
/data/data/####/4f0dba9c717f597a31d294da6a16bbe4
/data/data/####/4f0dba9c717f597a31d294da6a16bbe4.tmp
/data/data/####/53xOx6jBwPXx3LWk3JIU58LtiCOPqFKm7sSBo-4_B28=
/data/data/####/53xOx6jBwPXx3LWk3JIU58LtiCOPqFKm7sSBo-4_B28=.vng_meta
/data/data/####/7bf3a1e7bbd31e612eda3310c2cdb8075c43c6b5
/data/data/####/81aae894-2745-444d-be66-712fdd320f5f.js
/data/data/####/960ddf93bec24d286f478368be3e2cfa.js
/data/data/####/A6PvgotHWGNwg9H2gIsz09eOkOSaAL4pFDAoMNKxFkk=
/data/data/####/A6PvgotHWGNwg9H2gIsz09eOkOSaAL4pFDAoMNKxFkk=.vng_meta
/data/data/####/AdjustAttribution
/data/data/####/AdjustIoActivityState
/data/data/####/AdjustIoPackageQueue
/data/data/####/AppInfo
/data/data/####/AppVersion
/data/data/####/Cookies-journal
/data/data/####/FirebaseAppHeartBeat.xml
/data/data/####/HiAdSharedPreferences.xml
/data/data/####/IAConfigurationPreferences.xml
/data/data/####/IAConfigurationPreferences.xml.bak
/data/data/####/LYbFxhoGvPpJlVw5hnIj8tDnX8I9wAk68_fTc8gRjCo=
/data/data/####/LYbFxhoGvPpJlVw5hnIj8tDnX8I9wAk68_fTc8gRjCo=.vng_meta
/data/data/####/LocalAlertDialog.xml
/data/data/####/LocalAlertDialog.xml.bak
/data/data/####/MRAID-VIDEO.js
/data/data/####/PDuGMxdVRW9IRod9GMzO4yVzYSdV-6UnuPoD1mqqtEg=
/data/data/####/PDuGMxdVRW9IRod9GMzO4yVzYSdV-6UnuPoD1mqqtEg=.vng_meta
/data/data/####/PersistedInstallation1162172100tmp
/data/data/####/PersistedInstallation549413553tmp
/data/data/####/PersistentfileState
/data/data/####/PowerAssistService_native_connect
/data/data/####/PowerAssistService_native_core
/data/data/####/PowerAssistService_service_connect
/data/data/####/PowerAssistService_service_core
/data/data/####/PowerCleanService_native_core
/data/data/####/PowerCleanService_native_message
/data/data/####/PowerCleanService_service_core
/data/data/####/PowerCleanService_service_message
/data/data/####/PowerOtherService_native_connect
/data/data/####/PowerOtherService_native_message
/data/data/####/PowerOtherService_service_connect
/data/data/####/PowerOtherService_service_message
/data/data/####/T3sqclsNjazSl4hrm1yKzfDcd_mP8Zt0CG3-AG5kjSU=
/data/data/####/T3sqclsNjazSl4hrm1yKzfDcd_mP8Zt0CG3-AG5kjSU=.vng_meta
/data/data/####/W3D000-068-PLAY-en.html
/data/data/####/W3D_713_A22_720x1280_EN_30s-270x480-Q2.mp4
/data/data/####/WXovo7QJD8CKQM0WRto-3LheHVvCNx9s-qRfzKuel_k=
/data/data/####/WXovo7QJD8CKQM0WRto-3LheHVvCNx9s-qRfzKuel_k=.vng_meta
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/__default__.xml
/data/data/####/__default__.xml.bak
/data/data/####/a5f785a627f6d2a395f351dc01c413dc.png
/data/data/####/a8670432850eaec2573d0cd7b202ac47
/data/data/####/a8670432850eaec2573d0cd7b202ac47.tmp
/data/data/####/a8670432850eaec2573d0cd7b202ac47.tmp (deleted)
/data/data/####/accounts.xml
/data/data/####/ad-css-injection.css
/data/data/####/ad-js-injection.js
/data/data/####/ad.html
/data/data/####/adUnitConfig.json
/data/data/####/adc_events_db-journal
/data/data/####/adjust_preferences.xml
/data/data/####/admob.xml
/data/data/####/ads_cloud_config_sp.cfg.xml
/data/data/####/androidx.work.workdb-journal (deleted)
/data/data/####/b7623b9f6a231a05e10935ee39cbf15f
/data/data/####/b7623b9f6a231a05e10935ee39cbf15f.tmp
/data/data/####/cJZKeOuBrn4kERxqtaUH3SZ2oysoEQEeKwjgmXLRnTc.ttf
/data/data/####/cache_policy_journal
/data/data/####/cache_touch_timestamp
/data/data/####/centering_v1.css
/data/data/####/centering_v1.js
/data/data/####/classes.dex
/data/data/####/classes.dex;classes2.dex
/data/data/####/classes.dex;classes3.dex
/data/data/####/classes.dex;classes4.dex
/data/data/####/classes.dex;classes5.dex
/data/data/####/classes.dex;classes6.dex
/data/data/####/classes.oat
/data/data/####/com.applovin.sdk.1.xml
/data/data/####/com.applovin.sdk.preferences.p2IGUfNUvTbuVh_b8m...ml.bak
/data/data/####/com.applovin.sdk.preferences.p2IGUfNUvTbuVh_b8m...rC.xml
/data/data/####/com.applovin.sdk.shared.xml
/data/data/####/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
/data/data/####/com.facebook.internal.preferences.APP_SETTINGS.xml
/data/data/####/com.facebook.sdk.USER_SETTINGS.xml
/data/data/####/com.facebook.sdk.appEventPreferences.xml
/data/data/####/com.facebook.sdk.attributionTracking.xml
/data/data/####/com.google.android.gms.measurement.prefs.xml
/data/data/####/com.ludashi.dualspace_preferences.xml
/data/data/####/com.vungle.sdk.xml
/data/data/####/com.vungle.sdk.xml.bak (deleted)
/data/data/####/cv.xml
/data/data/####/d88474dcdc6b4dd6_0
/data/data/####/device-config.ini
/data/data/####/dfe6b2497a7513ba_0
/data/data/####/eae6296f-54ea-41e9-9ab0-73055680bbf4.js
/data/data/####/f038e94cb33282ab_0
/data/data/####/f87dd0e09bafc6e7bc000ddcbd9dfa84
/data/data/####/f87dd0e09bafc6e7bc000ddcbd9dfa84.tmp
/data/data/####/fdaf9921a2da4812a28dc6fb85bd931e
/data/data/####/fdaf9921a2da4812a28dc6fb85bd931e.tmp
/data/data/####/ffa978aaefc55657829548a6428728bb.mp4-270x480-hevc-Q2.mp4
/data/data/####/fileState
/data/data/####/fyber.ua.xml
/data/data/####/generatefid.lock
/data/data/####/google_app_measurement_local.db
/data/data/####/google_app_measurement_local.db-journal
/data/data/####/hiad_sp_properties_cache.xml
/data/data/####/https_googleads.g.doubleclick.net_0.localstorage-journal
/data/data/####/ia-global.config
/data/data/####/ia-remote.config
/data/data/####/icon.png
/data/data/####/index
/data/data/####/index.html
/data/data/####/inneractive.config
/data/data/####/jmXzavcXKxyytjW_p7aXmO2KZ_zhNEMZd5xQHFu0wuM=
/data/data/####/jmXzavcXKxyytjW_p7aXmO2KZ_zhNEMZd5xQHFu0wuM=.vng_meta
/data/data/####/journal
/data/data/####/libAppDataSearch.so
/data/data/####/libWhisper.so
/data/data/####/libbrotli_native.so
/data/data/####/libgeller_jni_lite_lib.so
/data/data/####/libgmscore.so
/data/data/####/libinertial-anchor-jni.so
/data/data/####/libjgcastservice.so
/data/data/####/libjiagu.so
/data/data/####/libjiagu_64.so
/data/data/####/libjingle_peerconnection_so.so
/data/data/####/libmatching.so
/data/data/####/libpulp_jni.so
/data/data/####/libsemanticlocation_inference_jni.so
/data/data/####/libvcdiffjni.so
/data/data/####/libwearable-selector.so
/data/data/####/log_16553390807045ef8c98d-872b-49f8-8965-afa5a61d33dd
/data/data/####/mbridge.msdk.db-journal
/data/data/####/mbridge.xml
/data/data/####/media
/data/data/####/metrics_guid
/data/data/####/mraid.js
/data/data/####/network_requests
/data/data/####/omid-latest.js
/data/data/####/pP4SWWcketo-o_TZszG0nwZKZbFjbAyxpveyz9sB4UA=
/data/data/####/pP4SWWcketo-o_TZszG0nwZKZbFjbAyxpveyz9sB4UA=.vng_meta
/data/data/####/package.ini
/data/data/####/packages.ini
/data/data/####/pay_config.xml
/data/data/####/pending.xml
/data/data/####/persistent_postback_cache.json
/data/data/####/proc_auxv
/data/data/####/server_recommend_apps.cfg
/data/data/####/share_date.xml
/data/data/####/signature.ini
/data/data/####/sp_app_file.xml
/data/data/####/sp_app_file.xml.bak
/data/data/####/stats.bin
/data/data/####/status.bin
/data/data/####/superboost.log
/data/data/####/template
/data/data/####/the-real-index
/data/data/####/tmp.5wDf2w
/data/data/####/tmp.Ev5Ig4
/data/data/####/tmp.K3nPCs
/data/data/####/tmp.Wie5zp
/data/data/####/tmp.hiD3iY
/data/data/####/tmp.mTpvzG
/data/data/####/tmp.xHIBbV
/data/data/####/uid-list.ini
/data/data/####/upgrade_file.cfg.xml
/data/data/####/userlist.xml
/data/data/####/vungle-privacy.svg
/data/data/####/vungle.svg
/data/data/####/vungle_db-journal
/data/data/####/vungle_settings
/data/data/####/vungle_settings (deleted)
/data/data/####/wallpaper_bg.jpg
/data/misc/####/primary.prof
/data/user_de/####/hiad_sp_properties_cache.xml
/data/user_de/####/hiad_sp_story_book_file.xml
/data/user_de/####/pps_de_migration.xml

Другие:

Запускает следующие shell-скрипты:

/system/bin/sh
app_process64 / okhttp3.internal.platform.inner.PowerGemEntrance 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 --application --nice-name=message --daemon
app_process64 / okhttp3.internal.platform.inner.PowerGemEntrance AgAAAE8AAAAvAGQAYQB0AGEALwB1AHMAZQByAC8AMAAvAGMAbwBtAC4AbAB1AGQAYQBzAGgAaQAuAGQAdQBhAGwAcwBwAGEAYwBlAC8AYQBwAHAAXwBUAG0AcABEAGkAcgAvAFAAbwB3AGUAcgBBAHMAcwBpAHMAdABTAGUAcgB2AGkAYwBlAF8AbgBhAHQAaQB2AGUAXwBjAG8AbgBuAGUAYwB0AAAATgAAAC8AZABhAHQAYQAvAHUAcwBlAHIALwAwAC8AYwBvAG0ALgBsAHUAZABhAHMAaABpAC4AZAB1AGEAbABzAHAAYQBjAGUALwBhAHAAcABfAFQAbQBwAEQAaQByAC8AUABvAHcAZQByAE8AdABoAGUAcgBTAGUAcgB2AGkAYwBlAF8AbgBhAHQAaQB2AGUAXwBjAG8AbgBuAGUAYwB0AAAAAAAHAAAAYwBvAG4AbgBlAGMAdAAAAAEAAAD/////AAAAAP////8AAAAA/////xUAAABjAG8AbQAuAGwAdQBkAGEAcwBoAGkALgBkAHUAYQBsAHMAcABhAGMAZQAAACQAAABhAG4AZAByAG8AaQBkAHgALgBjAG8AcgBlAC4AYQBwAHAALgBQAG8AdwBlAHIARQB4AHAAbwByAHQAUwBlAHIAdgBpAGMAZQAAAAAAAAAAAAAAAAAAAAAAAAAAAP7///8AAAAAAQAAACEAAABhAG4AZAByAG8AaQBkAHgALgBjAG8AcgBlAC4AYQBwAHAALgBVAFAARABBAFQARQBfAFIARQBDAEUASQBWAEUAUgAAAAAAAAD/////AAAAABUAAABjAG8AbQAuAGwAdQBkAGEAcwBoAGkALgBkAHUAYQBsAHMAcABhAGMAZQAAAP////8AAAAAAAAAAAAAAAAAAAAA/v///wAAAAABAAAA/////wAAAAD/////AAAAAP////8VAAAAYwBvAG0ALgBsAHUAZABhAHMAaABpAC4AZAB1AGEAbABzAHAAYQBjAGUAAAA0AAAAbwBrAGgAdAB0AHAAMwAuAGkAbgB0AGUAcgBuAGEAbAAuAHAAbABhAHQAZgBvAHIAbQAuAGkAbgBuAGUAcgAuAFAAbwB3AGUAcgBJAG4AcwB0AHIAdQBtAGUAbgB0AGEAdABpAG8AbgAAAAAAAAAAAAAAAAAAAAAAAAAAAP7///8AAAAA --application --nice-name=connect --daemon
app_process64 / okhttp3.internal.platform.inner.PowerGemEntrance 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 --application --nice-name=core --daemon
getprop ro.product.cpu.abi

Загружает динамические библиотеки:

libconscrypt_gmscore_jni
libjiagu_64
libnets
libv++_64

Использует следующие алгоритмы для шифрования данных:

AES-CBC-PKCS5Padding
AES-GCM-NoPadding
DES-ECB-PKCS5Padding
RSA-ECB-PKCS1Padding

Использует следующие алгоритмы для расшифровки данных:

AES-CBC-PKCS5Padding
RSA-ECB-PKCS1Padding

Осуществляет доступ к приватному интерфейсу ITelephony.

Использует специальную библиотеку для скрытия исполняемого байт-кода.

Получает информацию о сети.

Получает информацию о телефоне (номер, IMEI и т. д.).

Отрисовывает собственные окна поверх других приложений.

Запрашивает разрешение на отображение системных уведомлений.

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней