Техническая информация
Вредоносные функции:
Выполняет код следующих детектируемых угроз:
- Android.DownLoader.1101.origin
Сетевая активность:
Подключается к:
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) 64.2####.162.95:443
- TCP(TLS/1.0) connect####.gst####.com:443
- TCP(TLS/1.0) 1####.194.73.95:443
- TCP(TLS/1.2) 74.1####.205.113:443
- TCP(TLS/1.2) 64.2####.162.95:443
Запросы DNS:
- connect####.gst####.com
- rr9---s####.g####.com
Изменения в файловой системе:
Создает следующие файлы:
- /data/data/####/1510070.xml
- /data/data/####/MultiDex.lock
- /data/data/####/base.apk.classes1.dex
- /data/data/####/base.apk.classes1.dex.flock (deleted)
- /data/data/####/base.apk.classes1.zip
- /data/data/####/base.apk.classes10.dex
- /data/data/####/base.apk.classes10.dex.flock (deleted)
- /data/data/####/base.apk.classes10.zip
- /data/data/####/base.apk.classes11.dex
- /data/data/####/base.apk.classes11.dex.flock (deleted)
- /data/data/####/base.apk.classes11.zip
- /data/data/####/base.apk.classes12.dex
- /data/data/####/base.apk.classes12.dex.flock (deleted)
- /data/data/####/base.apk.classes12.zip
- /data/data/####/base.apk.classes13.dex
- /data/data/####/base.apk.classes13.dex.flock (deleted)
- /data/data/####/base.apk.classes13.zip
- /data/data/####/base.apk.classes14.dex
- /data/data/####/base.apk.classes14.dex.flock (deleted)
- /data/data/####/base.apk.classes14.zip
- /data/data/####/base.apk.classes15.dex
- /data/data/####/base.apk.classes15.dex.flock (deleted)
- /data/data/####/base.apk.classes15.zip
- /data/data/####/base.apk.classes16.dex
- /data/data/####/base.apk.classes16.dex.flock (deleted)
- /data/data/####/base.apk.classes16.zip
- /data/data/####/base.apk.classes17.dex
- /data/data/####/base.apk.classes17.dex.flock (deleted)
- /data/data/####/base.apk.classes17.zip
- /data/data/####/base.apk.classes18.dex
- /data/data/####/base.apk.classes18.dex.flock (deleted)
- /data/data/####/base.apk.classes18.zip
- /data/data/####/base.apk.classes19.dex
- /data/data/####/base.apk.classes19.dex.flock (deleted)
- /data/data/####/base.apk.classes19.zip
- /data/data/####/base.apk.classes2.dex
- /data/data/####/base.apk.classes2.dex.flock (deleted)
- /data/data/####/base.apk.classes2.zip
- /data/data/####/base.apk.classes20.dex
- /data/data/####/base.apk.classes20.dex.flock (deleted)
- /data/data/####/base.apk.classes20.zip
- /data/data/####/base.apk.classes21.dex
- /data/data/####/base.apk.classes21.dex.flock (deleted)
- /data/data/####/base.apk.classes21.zip
- /data/data/####/base.apk.classes22.dex
- /data/data/####/base.apk.classes22.dex.flock (deleted)
- /data/data/####/base.apk.classes22.zip
- /data/data/####/base.apk.classes23.dex
- /data/data/####/base.apk.classes23.dex.flock (deleted)
- /data/data/####/base.apk.classes23.zip
- /data/data/####/base.apk.classes24.dex
- /data/data/####/base.apk.classes24.dex.flock (deleted)
- /data/data/####/base.apk.classes24.zip
- /data/data/####/base.apk.classes3.dex
- /data/data/####/base.apk.classes3.dex.flock (deleted)
- /data/data/####/base.apk.classes3.zip
- /data/data/####/base.apk.classes4.dex
- /data/data/####/base.apk.classes4.dex.flock (deleted)
- /data/data/####/base.apk.classes4.zip
- /data/data/####/base.apk.classes5.dex
- /data/data/####/base.apk.classes5.dex.flock (deleted)
- /data/data/####/base.apk.classes5.zip
- /data/data/####/base.apk.classes6.dex
- /data/data/####/base.apk.classes6.dex.flock (deleted)
- /data/data/####/base.apk.classes6.zip
- /data/data/####/base.apk.classes7.dex
- /data/data/####/base.apk.classes7.dex.flock (deleted)
- /data/data/####/base.apk.classes7.zip
- /data/data/####/base.apk.classes8.dex
- /data/data/####/base.apk.classes8.dex.flock (deleted)
- /data/data/####/base.apk.classes8.zip
- /data/data/####/base.apk.classes9.dex
- /data/data/####/base.apk.classes9.dex.flock (deleted)
- /data/data/####/base.apk.classes9.zip
- /data/data/####/multidex.version.xml
- /data/data/####/temp (deleted)
- /data/data/####/tmp-base.apk.classes1007391217.zip
- /data/data/####/tmp-base.apk.classes1168372252.zip
- /data/data/####/tmp-base.apk.classes117795355.zip
- /data/data/####/tmp-base.apk.classes1180086286.zip
- /data/data/####/tmp-base.apk.classes118642004.zip
- /data/data/####/tmp-base.apk.classes1187866425.zip
- /data/data/####/tmp-base.apk.classes1204815983.zip
- /data/data/####/tmp-base.apk.classes1232686544.zip
- /data/data/####/tmp-base.apk.classes1296605503.zip
- /data/data/####/tmp-base.apk.classes1309150174.zip
- /data/data/####/tmp-base.apk.classes1514326277.zip
- /data/data/####/tmp-base.apk.classes1523105222.zip
- /data/data/####/tmp-base.apk.classes1549817856.zip
- /data/data/####/tmp-base.apk.classes1552636521.zip
- /data/data/####/tmp-base.apk.classes1645661028.zip
- /data/data/####/tmp-base.apk.classes1649208799.zip
- /data/data/####/tmp-base.apk.classes1662021884.zip
- /data/data/####/tmp-base.apk.classes169100991.zip
- /data/data/####/tmp-base.apk.classes1742684143.zip
- /data/data/####/tmp-base.apk.classes1752546669.zip
- /data/data/####/tmp-base.apk.classes1772565290.zip
- /data/data/####/tmp-base.apk.classes1779650052.zip
- /data/data/####/tmp-base.apk.classes1787377710.zip
- /data/data/####/tmp-base.apk.classes1816024621.zip
- /data/data/####/tmp-base.apk.classes1844492438.zip
- /data/data/####/tmp-base.apk.classes1892407142.zip
- /data/data/####/tmp-base.apk.classes190175379.zip
- /data/data/####/tmp-base.apk.classes1937966321.zip
- /data/data/####/tmp-base.apk.classes1938137660.zip
- /data/data/####/tmp-base.apk.classes1946031775.zip
- /data/data/####/tmp-base.apk.classes1984927724.zip
- /data/data/####/tmp-base.apk.classes2001433162.zip
- /data/data/####/tmp-base.apk.classes281986866.zip
- /data/data/####/tmp-base.apk.classes284621050.zip
- /data/data/####/tmp-base.apk.classes360268594.zip
- /data/data/####/tmp-base.apk.classes396846341.zip
- /data/data/####/tmp-base.apk.classes412749960.zip
- /data/data/####/tmp-base.apk.classes418282231.zip
- /data/data/####/tmp-base.apk.classes489501089.zip
- /data/data/####/tmp-base.apk.classes58465389.zip
- /data/data/####/tmp-base.apk.classes637103493.zip
- /data/data/####/tmp-base.apk.classes700987545.zip
- /data/data/####/tmp-base.apk.classes76159445.zip
- /data/data/####/tmp-base.apk.classes772412231.zip
- /data/data/####/tmp-base.apk.classes805072662.zip
- /data/data/####/tmp-base.apk.classes805903448.zip
- /data/data/####/tmp-base.apk.classes878245393.zip
- /data/data/####/tmp-base.apk.classes923159967.zip
