Technical information
Malicious functions:
Sends SMS messages:
- 20041: KESUB HY101 pk01
Network activity:
Connecting to:
- im####.####.com
- g####.####.com
- google-####.com
- u####.####.me
- f####.####.com
- googlet####.com
- s####.####.net
- a####.####.com
- pag####.####.com
HTTP GET requests:
- a####.####.com/html5game/3d29f086-1059-4efb-9b1a-4b6460d35607/A1000-1
- g####.####.com/html5games/j/jetpack-master/v380/assets/atlas_speedboost....
- google-####.com/r/collect?v=####&_v=####&aip=####&a=####&t=####&_s=####&...
- g####.####.com/html5games/j/jetpack-master/v380/dummy.js
- g####.####.com/html5games/j/jetpack-master/v380/assets/bgtile.png
- pag####.####.com/pagead/gen_204?rt=####&lid=####&sdkv=####&id=####&c=###...
- g####.####.com/flags/flag_fr.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/loading_bar.png
- google-####.com/collect?v=####&_v=####&aip=####&a=####&t=####&_s=####&dl...
- a####.####.com/assets/0.2-116c4903/js/helper.js
- g####.####.com/html5games/gameapi/v1/images/RotateArrow.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/loading_shell.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/missions.png
- g####.####.com/flags/flag_it.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/atlas_boom.png
- g####.####.com/portal/4638e320-4444-4514-81c4-d80a8c662371/564f2b86a3bf7...
- g####.####.com/flags/flag_ru.png
- pag####.####.com/pagead/gen_204?request_type=####&lid=####&sdkv=####&id=...
- google-####.com/plugins/ua/linkid.js
- g####.####.com/flags/flag_en.png
- im####.####.com/css?family=####
- g####.####.com/flags/flag_nl.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/pause_screen.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/shopscreen.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/fon_tile.png
- g####.####.com/html5games/gameapi/v1/images/RotateToPortrait.png
- google-####.com/r/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&u...
- g####.####.com/html5games/j/jetpack-master/v380/assets/atlas_gui.json
- g####.####.com/html5games/gameapi/v1/images/RotateToLandscape.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/atlas_play.json
- g####.####.com/flags/flag_es.png
- pag####.####.com/pagead/gen_204?id=####&v=####&r=####&efm=####&if=####&s...
- g####.####.com/html5games/j/jetpack-master/v380/assets/atlas_play.png
- g####.####.com/flags/flag_pt.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/atlas_gui.png
- g####.####.com/html5games/j/jetpack-master/v380/project.json
- g####.####.com/flags/flag_pl.png
- g####.####.com/flags/flag_de.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/spin_screen.png
- g####.####.com/html5games/gameapi/v1.js?e=####
- f####.####.com/s/fjallaone/v4/rxxXUYj4oZ6Q5oDJFtEd6sDdSZkkecOE1hvV7ZHvhy...
- google-####.com/analytics.js
- a####.####.com/play/hit/3d29f086-1059-4efb-9b1a-4b6460d35607/A1000-1
- a####.####.com/gameapi/script/3d29f086-1059-4efb-9b1a-4b6460d35607/4638e...
- a####.####.com/assets/0.2-116c4903/css/pay.css
- g####.####.com/html5games/j/jetpack-master/v380/assets/atlas_boom.json
- a####.####.com/assets/0.2-116c4903/js/gameapi.js
- g####.####.com/html5games/j/jetpack-master/v380/css/Payment.css
- g####.####.com/html5games/j/jetpack-master/v380/styles.css
- g####.####.com/html5games/j/jetpack-master/v380/text/strings.json
- g####.####.com/html5games/j/jetpack-master/v380/assets/atlas_gui2.json
- g####.####.com/html5games/j/jetpack-master/v380/assets/bg_mainmenu.png
- g####.####.com/html5games/j/jetpack-master/v380/?fg_domain=####&fg_aid=#...
- g####.####.com/html5games/j/jetpack-master/v380/assets/bg_coins.png
- googlet####.com/gtm.js?id=####&l=####
- a####.####.com/assets/0.2-116c4903/css/play.css
- google-####.com/collect?v=####&_v=####&aip=####&a=####&t=####&ni=####&_s...
- g####.####.com/flags/flag_tr.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/poloska.png
- s####.####.net/instream/video/client.js
- g####.####.com/html5games/j/jetpack-master/v380/assets/atlas_gui2.png
- g####.####.com/html5games/j/jetpack-master/v380/assets/logo.png
- im####.####.com/js/core/bridge3.169.1_en.html
- pag####.####.com/pagead/gen_204?id=####&v=####&r=####&efm=####&sdk=####&...
- g####.####.com/html5games/j/jetpack-master/v380/js/all.js
HTTP POST requests:
- u####.####.me/api/message
Modified file system:
Creates the following files:
- <Package Folder>/cache/webviewCacheChromium/f_000018
- <Package Folder>/cache/webviewCacheChromium/f_000016
- <Package Folder>/cache/webviewCacheChromium/f_000017
- <Package Folder>/cache/webviewCacheChromium/f_000014
- <Package Folder>/cache/webviewCacheChromium/f_000015
- <Package Folder>/cache/webviewCacheChromium/f_000012
- <Package Folder>/cache/webviewCacheChromium/f_000013
- <Package Folder>/cache/webviewCacheChromium/f_000010
- <Package Folder>/cache/webviewCacheChromium/f_000011
- <Package Folder>/cache/webviewCacheChromium/f_00000a
- <Package Folder>/cache/webviewCacheChromium/f_00000c
- <Package Folder>/cache/webviewCacheChromium/f_00000b
- <Package Folder>/cache/webviewCacheChromium/f_00000e
- <Package Folder>/cache/webviewCacheChromium/f_00000d
- <Package Folder>/cache/webviewCacheChromium/f_00000f
- <Package Folder>/cache/webviewCacheChromium/index
- <Package Folder>/cache/webviewCacheChromium/f_000009
- <Package Folder>/cache/webviewCacheChromium/f_000008
- <Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsMain
- <Package Folder>/files/.yflurrydatasenderblock.545d4429-da2a-4232-8ed8-9391dde89edf
- <Package Folder>/cache/webviewCacheChromium/f_000001
- <Package Folder>/cache/webviewCacheChromium/f_000003
- <Package Folder>/cache/webviewCacheChromium/f_000002
- <Package Folder>/cache/webviewCacheChromium/f_000005
- <Package Folder>/cache/webviewCacheChromium/f_000004
- <Package Folder>/cache/webviewCacheChromium/f_000007
- <Package Folder>/cache/webviewCacheChromium/f_000006
- <Package Folder>/files/.yflurrydatasenderblock.91920813-6a06-4a93-be58-d2834a1ab421
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal
- <Package Folder>/files/.YFlurrySenderIndex.info.AnalyticsData_DTJSPQCNSWTF8ZBRBG5P_226
- <Package Folder>/cache/webviewCacheChromium/data_3
- <Package Folder>/cache/webviewCacheChromium/data_2
- <Package Folder>/cache/webviewCacheChromium/data_1
- <Package Folder>/cache/webviewCacheChromium/data_0
Miscellaneous:
Contains functionality to send SMS messages automatically.
