Android.SmsSend.20429

Technical information

Malicious functions:

Sends SMS messages:

54999818: YMN SDK503ED 6Y

Network activity:

Connecting to:

1####.####.com
2####.####.155
a####.####.com
a####.####.mobi
adse####.####.mobi
allsite####.com
b####.com
bonga####.com
c####.####.com
cpgnrot####.com
d####.####.com
et####.com
f####.####.gdn
fl####.####.com
gl####.####.com
gl####.####.com:6566
google-####.com
hy####.com
i####.####.com
m####.####.com
mobair####.com
mobilem####.me
p####.####.com
pag####.####.com
pro####.####.com
probi####.com
rc####.####.com
s####.####.link
t####.####.com
tango####.com
technol####.org
trac####.####.com
woo####.com
woo####.com:7079

HTTP GET requests:

1####.####.com/proc.php?423bf4b####
2####.####.155/cm-tracker/cmreqrec.do?pid=####&sysuid=####&cid=####&publ...
a####.####.com/fd/ls/l?IG=####&CID=####&TYPE=####&DATA=####
a####.####.mobi/?utm_term=####&clickverify=####&utm_content=####
adse####.####.mobi/tracker/click.php?link=####&click_id=####&pub_id=####...
allsite####.com/tour/join/
b####.com/notifications/render?bnptrigger=####&IG=####&IID=####
bonga####.com/track?c=####&ps=####&csurl=####&subid=####
c####.####.com/?utm_term=####&clickverify=####&utm_content=####
c####.####.com/Rk/RealityKingsCom/Tour/assets/js/common.min.340de6fe.js
c####.####.com/assets/main/img/pb-sprite2.png
c####.####.com/rk/bignaturals/faces/sofiryan070417-300x200.jpg
c####.####.com/rk/cumfiesta/faces/daisystone062717-300x200.jpg
c####.####.com/rk/firsttimeauditions/faces/sidneyalexis062917.jpg
c####.####.com/rk/rkprime/faces/kelsimonroe070317-300x200.jpg
cpgnrot####.com/campaign/8741%7C656?tag=####&token1=####&_uu=####
d####.####.com/d/33164576433fd4daa1?sub=####
et####.com/guid?app_id=####&eventName=####&
f####.####.gdn/?v=####&s1=####&kw=####
fl####.####.com/1/associates-ads/1/OP/?cb=####&p=####
gl####.####.com/AdRedirect.aspx?offerid=####&cid=####&affid=####&aff_sub...
gl####.####.com/mobiledirect/?uid=####&aid=####&back=####&push=####&soun...
gl####.####.com:6566/AdRedirect.aspx?offerid=####&cid=####&affid=####&af...
google-####.com/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&ul=...
hy####.com/33E10/a7_DDQ/f7yG/e7GXXqk/KfTABPVZJ-di6XI8hUUwNXp1W83vMWCTx0t...
i####.####.com/015/1a8/2a7/819ac9dff69c2006da06ae39eb4930b2_thumb_medium...
i####.####.com/01d/1d9/145/6d099df7122f5515c31c69dc51b7f8d6_thumb_medium...
i####.####.com/023/21b/39a/705f6a0782f4f9095761a68f39f5ff29_thumb_medium...
i####.####.com/popunders/map/img/marker-back.png
m####.####.com/c/69c5e7f9210e673c?tid=####&trafficsource_id=####&token2=...
mobair####.com/?a=####&c=####&s1=####&s2=####
mobilem####.me/r/1efbd85e-6394-11e7-b2b1-1141973a19df/1/
p####.####.com/p/nbz3/direct/t:94175_nl_495_android/c:25d44e54-6394-11e7...
pag####.####.com/pagead/js/r20170629/r20170110/reactive_library.js
pro####.####.com/stream_SharonSprite/1.jpg?t=####
probi####.com/main/TermsAndConditions
rc####.####.com/e/cm?o=####&p=####&l=####&category=####&f=####&linkID=##...
s####.####.link/click?sm=####&pub=####&clickid=####&cdata=####&status=##...
t####.####.com/?aff_id=####&offer_id=####&aff_sub2=####&aff_sub=####
t####.####.com/hit.php?c=####&ps=####&csurl=####&subid=####
tango####.com/66291_nl_495_android?rpm=####&fallbackUrl=####&domainerId=...
technol####.org/wp-content/uploads/2017/07/shutterstock_189107909-60x60....
trac####.####.com/aff_c?offer_id=####&aff_id=####&aff_sub=####&aff_sub2=...

HTTP POST requests:

woo####.com/jsdk/ss.action?b=####
woo####.com:7079/jsdk/ss.action?b=####

Modified file system:

Creates the following files:

<Package Folder>/cache/####/data_0
<Package Folder>/cache/####/data_1
<Package Folder>/cache/####/data_2
<Package Folder>/cache/####/data_3
<Package Folder>/cache/####/f_000001
<Package Folder>/cache/####/f_000002
<Package Folder>/cache/####/f_000003
<Package Folder>/cache/####/f_000004
<Package Folder>/cache/####/f_000005
<Package Folder>/cache/####/f_000006
<Package Folder>/cache/####/f_000007
<Package Folder>/cache/####/f_000008
<Package Folder>/cache/####/f_000009
<Package Folder>/cache/####/f_00000a
<Package Folder>/cache/####/f_00000b
<Package Folder>/cache/####/f_00000c
<Package Folder>/cache/####/f_00000d
<Package Folder>/cache/####/f_00000e
<Package Folder>/cache/####/f_00000f
<Package Folder>/cache/####/f_000010
<Package Folder>/cache/####/f_000011
<Package Folder>/cache/####/f_000012
<Package Folder>/cache/####/f_000013
<Package Folder>/cache/####/f_000014
<Package Folder>/cache/####/f_000015
<Package Folder>/cache/####/f_000016
<Package Folder>/cache/####/f_000017
<Package Folder>/cache/####/f_000018
<Package Folder>/cache/####/f_000019
<Package Folder>/cache/####/f_00001a
<Package Folder>/cache/####/f_00001b
<Package Folder>/cache/####/f_00001c
<Package Folder>/cache/####/f_00001d
<Package Folder>/cache/####/f_00001e
<Package Folder>/cache/####/f_00001f
<Package Folder>/cache/####/f_000020
<Package Folder>/cache/####/f_000021
<Package Folder>/cache/####/f_000022
<Package Folder>/cache/####/f_000023
<Package Folder>/cache/####/f_000024
<Package Folder>/cache/####/f_000025
<Package Folder>/cache/####/f_000026
<Package Folder>/cache/####/f_000027
<Package Folder>/cache/####/f_000028
<Package Folder>/cache/####/f_000029
<Package Folder>/cache/####/f_00002a
<Package Folder>/cache/####/f_00002b
<Package Folder>/cache/####/f_00002c
<Package Folder>/cache/####/f_00002d
<Package Folder>/cache/####/f_00002e
<Package Folder>/cache/####/f_00002f
<Package Folder>/cache/####/f_000030
<Package Folder>/cache/####/f_000031
<Package Folder>/cache/####/f_000032
<Package Folder>/cache/####/f_000033
<Package Folder>/cache/####/f_000034
<Package Folder>/cache/####/f_000035
<Package Folder>/cache/####/f_000036
<Package Folder>/cache/####/f_000037
<Package Folder>/cache/####/f_000038
<Package Folder>/cache/####/f_000039
<Package Folder>/cache/####/f_00003a
<Package Folder>/cache/####/f_00003b
<Package Folder>/cache/####/f_00003c
<Package Folder>/cache/####/f_00003d
<Package Folder>/cache/####/f_00003e
<Package Folder>/cache/####/f_00003f
<Package Folder>/cache/####/f_000040
<Package Folder>/cache/####/f_000041
<Package Folder>/cache/####/f_000042
<Package Folder>/cache/####/f_000043
<Package Folder>/cache/####/f_000044
<Package Folder>/cache/####/f_000045
<Package Folder>/cache/####/f_000046
<Package Folder>/cache/####/f_000047
<Package Folder>/cache/####/f_000048
<Package Folder>/cache/####/f_000049
<Package Folder>/cache/####/f_00004a
<Package Folder>/cache/####/f_00004b
<Package Folder>/cache/####/f_00004c
<Package Folder>/cache/####/f_00004d
<Package Folder>/cache/####/f_00004e
<Package Folder>/cache/####/f_00004f
<Package Folder>/cache/####/f_000050
<Package Folder>/cache/####/f_000051
<Package Folder>/cache/####/f_000052
<Package Folder>/cache/####/f_000053
<Package Folder>/cache/####/f_000054
<Package Folder>/cache/####/f_000055
<Package Folder>/cache/####/f_000056
<Package Folder>/cache/####/f_000057
<Package Folder>/cache/####/f_000058
<Package Folder>/cache/####/f_000059
<Package Folder>/cache/####/f_00005a
<Package Folder>/cache/####/f_00005b
<Package Folder>/cache/####/f_00005c
<Package Folder>/cache/####/f_00005d
<Package Folder>/cache/####/f_00005e
<Package Folder>/cache/####/f_00005f
<Package Folder>/cache/####/f_000060
<Package Folder>/cache/####/f_000061
<Package Folder>/cache/####/f_000062
<Package Folder>/cache/####/f_000063
<Package Folder>/cache/####/f_000064
<Package Folder>/cache/####/index
<Package Folder>/databases/webview.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal
<Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
<Package Folder>/shared_prefs/com.hyjt.app.android.india.preferrence.xml
<Package Folder>/shared_prefs/com.hyjt.app.android.india.preferrence.xml.bak
<Package Folder>/shared_prefs/com.hyjt.app.spf_wap_413.xml
<SD-Card>/update.data

Miscellaneous:

Contains functionality to send SMS messages automatically.

Technologies

Terminology

Training and education

Myths

Technical information

Curing recommendations

Free trial