Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Packed.41013

Added to the Dr.Web virus database: 2018-11-14

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.DownLoader.743.origin
Network activity:
Connects to:
  • UDP(DNS) <Google DNS>
  • TCP(HTTP/1.0) pis.al####.com:80
  • TCP(HTTP/1.1) large####.c####.l####.####.com:80
  • TCP(HTTP/1.1) pus.al####.com:80
  • TCP(HTTP/1.1) cdn.app.fr####.top:80
  • TCP(HTTP/1.1) 1####.76.224.67:80
  • TCP(HTTP/1.1) pss.al####.com:80
  • TCP(TLS/1.0) de####.mixp####.com:443
  • TCP(TLS/1.0) pns.al####.com:443
  • TCP(TLS/1.0) b####.be####.top:443
  • UDP 1####.168.108.254:4466
DNS requests:
  • b####.be####.top
  • cdn.app.fr####.top
  • cdn.img.fly####.top
  • de####.mixp####.com
  • pis.al####.com
  • pns.al####.com
  • proxy####.aliv####.com
  • pss.al####.com
  • pus.al####.com
HTTP GET requests:
  • cdn.app.fr####.top/upload/201808/22/app/20180822142154261.apk
  • large####.c####.l####.####.com/upload/201806/22/img/20180622182119519.png
  • large####.c####.l####.####.com/upload/201807/25/img/20180725141120849.png
  • large####.c####.l####.####.com/upload/201807/25/img/20180725141121686.png
  • large####.c####.l####.####.com/upload/201808/17/img/20180817110752665.png
  • large####.c####.l####.####.com/upload/201809/5/img/20180905095907155.png
  • large####.c####.l####.####.com/upload/201810/18/img/20181018095931128.png
  • pus.al####.com/kernal/sdkcontrol/vod_android-mobile_x86_9.1.1.1220.jpg
HTTP POST requests:
  • pis.al####.com/p/pcdn/i.php?v=####
  • pss.al####.com/iku/log/acc
  • pss.al####.com/iku/log/acc?ver=####&flag=####&t=####&mytype=####
File system changes:
Creates the following files:
  • /data/data/####/._180CC29A-C958-4188-86CF-B2E3B5883372.ikb
  • /data/data/####/._180CC29A-C958-4188-86CF-B2E3B5883372.jpg
  • /data/data/####/._18975690-F517-4747-9F36-FC8329113AA3.ikb
  • /data/data/####/._18975690-F517-4747-9F36-FC8329113AA3.jpg
  • /data/data/####/._18CF634A-F5F7-454C-85EA-7AA343F18910.ikb
  • /data/data/####/._18CF634A-F5F7-454C-85EA-7AA343F18910.jpg
  • /data/data/####/._1AA44376-67F6-4CE0-9CEC-F46B06F64440.ikb
  • /data/data/####/._1AA44376-67F6-4CE0-9CEC-F46B06F64440.jpg
  • /data/data/####/._1C0364A8-E9A1-4621-89C1-A2E38FCC7F89.ikb
  • /data/data/####/._1C0364A8-E9A1-4621-89C1-A2E38FCC7F89.jpg
  • /data/data/####/._1_ball.animatic
  • /data/data/####/._2CA92D5D-221F-47A6-A02B-2236F676E4FA.ikb
  • /data/data/####/._2CA92D5D-221F-47A6-A02B-2236F676E4FA.jpg
  • /data/data/####/._2E0BE7DE-B9DA-4709-A69E-D2FA2F5E3939.ikb
  • /data/data/####/._2E0BE7DE-B9DA-4709-A69E-D2FA2F5E3939.jpg
  • /data/data/####/._2_rabbit.animatic
  • /data/data/####/._33626C26-2FB8-4620-B807-1612A306C943.ikb
  • /data/data/####/._33626C26-2FB8-4620-B807-1612A306C943.jpg
  • /data/data/####/._3732A473-706E-434D-871D-22A71D340048.ikb
  • /data/data/####/._3732A473-706E-434D-871D-22A71D340048.jpg
  • /data/data/####/._387B1CF8-850F-49DB-B7FD-43417AC6E4B0.ikb
  • /data/data/####/._387B1CF8-850F-49DB-B7FD-43417AC6E4B0.jpg
  • /data/data/####/._3975DAF0-57D5-4308-BD78-139B64813421.ikb
  • /data/data/####/._3975DAF0-57D5-4308-BD78-139B64813421.jpg
  • /data/data/####/._3_bird.animatic
  • /data/data/####/._44C573CC-D136-475F-BFBC-3F8BAF29EC44.ikb
  • /data/data/####/._44C573CC-D136-475F-BFBC-3F8BAF29EC44.jpg
  • /data/data/####/._45B2A259-97FA-4A6E-8A43-B8F6C63AFE0A.ikb
  • /data/data/####/._45B2A259-97FA-4A6E-8A43-B8F6C63AFE0A.jpg
  • /data/data/####/._498EA363-8835-4D1B-B559-3FD619B1F843.ikb
  • /data/data/####/._498EA363-8835-4D1B-B559-3FD619B1F843.jpg
  • /data/data/####/._4ED54400-4C4B-4368-AFA8-6ED76C38D4E6.ikb
  • /data/data/####/._4ED54400-4C4B-4368-AFA8-6ED76C38D4E6.jpg
  • /data/data/####/._4_dolphin.animatic
  • /data/data/####/._50D3AFB1-9D9E-40A3-B7D6-4407AAD9FC68.ikb
  • /data/data/####/._50D3AFB1-9D9E-40A3-B7D6-4407AAD9FC68.jpg
  • /data/data/####/._558ED4C3-FA4A-471E-9D21-89BDFA5498EF.ikb
  • /data/data/####/._558ED4C3-FA4A-471E-9D21-89BDFA5498EF.jpg
  • /data/data/####/._5D378E1C-CCE2-46CF-83C4-843137CD1DA6.ikb
  • /data/data/####/._5D378E1C-CCE2-46CF-83C4-843137CD1DA6.jpg
  • /data/data/####/._5_wise-monkey.animatic
  • /data/data/####/._673F5897-91F7-4208-A286-3CA465BB81CA.ikb
  • /data/data/####/._673F5897-91F7-4208-A286-3CA465BB81CA.jpg
  • /data/data/####/._68D488CF-02F0-45C8-930E-DAC6CEC14107.ikb
  • /data/data/####/._68D488CF-02F0-45C8-930E-DAC6CEC14107.jpg
  • /data/data/####/._6D94A4B8-7EE2-4F7C-89C2-4C9357029F5F.ikb
  • /data/data/####/._6D94A4B8-7EE2-4F7C-89C2-4C9357029F5F.jpg
  • /data/data/####/._6EC647CA-3F2A-491A-9D43-F1CFA0D9AD3C.ikb
  • /data/data/####/._6EC647CA-3F2A-491A-9D43-F1CFA0D9AD3C.jpg
  • /data/data/####/._6_dog.animatic
  • /data/data/####/._78ABD9FA-AD10-4E05-B183-8DB327CBF0AB.ikb
  • /data/data/####/._78ABD9FA-AD10-4E05-B183-8DB327CBF0AB.jpg
  • /data/data/####/._78D072D9-E6C6-4566-9069-360651BEA6F6.ikb
  • /data/data/####/._78D072D9-E6C6-4566-9069-360651BEA6F6.jpg
  • /data/data/####/._7908AAF4-668B-4148-819B-68E163433ACC.ikb
  • /data/data/####/._7908AAF4-668B-4148-819B-68E163433ACC.jpg
  • /data/data/####/._7D56912C-4FF7-4A2F-8538-217CDF5C4B6B.ikb
  • /data/data/####/._7D56912C-4FF7-4A2F-8538-217CDF5C4B6B.jpg
  • /data/data/####/._7DFA6F41-C623-4114-A490-E7D5DAB989B1.ikb
  • /data/data/####/._7DFA6F41-C623-4114-A490-E7D5DAB989B1.jpg
  • /data/data/####/._8E035A23-03CD-4EC8-84CF-00E3D86C8DD9.ikb
  • /data/data/####/._8E035A23-03CD-4EC8-84CF-00E3D86C8DD9.jpg
  • /data/data/####/._8F0DA200-5B83-46DB-BD93-4CB8A0084479.ikb
  • /data/data/####/._8F0DA200-5B83-46DB-BD93-4CB8A0084479.jpg
  • /data/data/####/._919E0151-19C3-43E7-B3B8-51B00E80AE56.ikb
  • /data/data/####/._919E0151-19C3-43E7-B3B8-51B00E80AE56.jpg
  • /data/data/####/._94FF39CA-7622-42D6-9AFA-BC4C1AB6E31A.ikb
  • /data/data/####/._94FF39CA-7622-42D6-9AFA-BC4C1AB6E31A.jpg
  • /data/data/####/._954BC774-AFA3-4BD7-B79B-9897932A2E26.ikb
  • /data/data/####/._954BC774-AFA3-4BD7-B79B-9897932A2E26.jpg
  • /data/data/####/._99FBC928-1692-49CA-9532-62E00C54144B.ikb
  • /data/data/####/._99FBC928-1692-49CA-9532-62E00C54144B.jpg
  • /data/data/####/._9D78C47B-BD86-448C-9376-224ABB714442.ikb
  • /data/data/####/._9D78C47B-BD86-448C-9376-224ABB714442.jpg
  • /data/data/####/._A29D3935-B392-444F-A3B5-E283738D12B8.ikb
  • /data/data/####/._A29D3935-B392-444F-A3B5-E283738D12B8.jpg
  • /data/data/####/._A2BAC03D-C104-42AE-A598-E6B5E6AAB486.ikb
  • /data/data/####/._A2BAC03D-C104-42AE-A598-E6B5E6AAB486.jpg
  • /data/data/####/._A4E5FD28-8644-4658-9C4C-6A0FBA35766E.ikb
  • /data/data/####/._A4E5FD28-8644-4658-9C4C-6A0FBA35766E.jpg
  • /data/data/####/._A541FE36-0F38-4001-851F-5F456C61D3DE.ikb
  • /data/data/####/._A541FE36-0F38-4001-851F-5F456C61D3DE.jpg
  • /data/data/####/._A6EFAA47-D115-430F-8F82-935BE8C49801.ikb
  • /data/data/####/._A6EFAA47-D115-430F-8F82-935BE8C49801.jpg
  • /data/data/####/._AAD02ABF-D7AE-467A-B4EA-026B65ACB1C0.ikb
  • /data/data/####/._AAD02ABF-D7AE-467A-B4EA-026B65ACB1C0.jpg
  • /data/data/####/._AE1E2530-EDC3-4BF0-9CBC-D38E456B79DF.ikb
  • /data/data/####/._AE1E2530-EDC3-4BF0-9CBC-D38E456B79DF.jpg
  • /data/data/####/._B1DF03CC-034E-4FC2-8693-E1BC9FB9B493.ikb
  • /data/data/####/._B1DF03CC-034E-4FC2-8693-E1BC9FB9B493.jpg
  • /data/data/####/._B21C5477-9C78-4C8C-BF79-6E123731BA47.ikb
  • /data/data/####/._B21C5477-9C78-4C8C-BF79-6E123731BA47.jpg
  • /data/data/####/._B3A67D32-84E4-428B-BBEC-E0C414B71015.ikb
  • /data/data/####/._B3A67D32-84E4-428B-BBEC-E0C414B71015.jpg
  • /data/data/####/._B3B73E14-2CF3-48A7-B7CD-BE1F20104D0F.ikb
  • /data/data/####/._B3B73E14-2CF3-48A7-B7CD-BE1F20104D0F.jpg
  • /data/data/####/._B83B0D75-2BF9-4481-BC79-365B77B4542A.ikb
  • /data/data/####/._B83B0D75-2BF9-4481-BC79-365B77B4542A.jpg
  • /data/data/####/._BE133540-62C2-4A2F-99DA-47EBE698DADB.ikb
  • /data/data/####/._BE133540-62C2-4A2F-99DA-47EBE698DADB.jpg
  • /data/data/####/._D17D9B09-AA86-41CB-8F19-0CB635452FCC.ikb
  • /data/data/####/._D17D9B09-AA86-41CB-8F19-0CB635452FCC.jpg
  • /data/data/####/._D17E1FE5-05D0-425E-BA25-7C3D9FD8F70F.ikb
  • /data/data/####/._D17E1FE5-05D0-425E-BA25-7C3D9FD8F70F.jpg
  • /data/data/####/._D3D1D0F4-5782-4070-B4D1-A0A5E0482F0A.ikb
  • /data/data/####/._D3D1D0F4-5782-4070-B4D1-A0A5E0482F0A.jpg
  • /data/data/####/._D4FD3176-B4D5-4B80-B5F5-45B8E43EBCA2.ikb
  • /data/data/####/._D4FD3176-B4D5-4B80-B5F5-45B8E43EBCA2.jpg
  • /data/data/####/._D857B1B5-89B9-48A2-99A2-6E91E9D8D17C.ikb
  • /data/data/####/._D857B1B5-89B9-48A2-99A2-6E91E9D8D17C.jpg
  • /data/data/####/._F07613A7-D082-4256-A195-D091EE346238.ikb
  • /data/data/####/._F07613A7-D082-4256-A195-D091EE346238.jpg
  • /data/data/####/._F3EFCFFC-9F23-472B-BDD4-FFB5CF75E700.ikb
  • /data/data/####/._F3EFCFFC-9F23-472B-BDD4-FFB5CF75E700.jpg
  • /data/data/####/._FC8976E3-8904-472A-BA54-CE2CC718161B.ikb
  • /data/data/####/._FC8976E3-8904-472A-BA54-CE2CC718161B.jpg
  • /data/data/####/._FF010BB1-4FFF-4000-961A-E898CF9DC049.ikb
  • /data/data/####/._FF010BB1-4FFF-4000-961A-E898CF9DC049.jpg
  • /data/data/####/._Frames
  • /data/data/####/._Meta.json
  • /data/data/####/._Source
  • /data/data/####/._Thumbnails
  • /data/data/####/0f4a0140-6917-4071-8543-04bea09d26e1
  • /data/data/####/146x146_18CF634A-F5F7-454C-85EA-7AA343F18910.jpg
  • /data/data/####/146x146_2CA92D5D-221F-47A6-A02B-2236F676E4FA.jpg
  • /data/data/####/146x146_2E0BE7DE-B9DA-4709-A69E-D2FA2F5E3939.jpg
  • /data/data/####/146x146_3732A473-706E-434D-871D-22A71D340048.jpg
  • /data/data/####/146x146_3975DAF0-57D5-4308-BD78-139B64813421.jpg
  • /data/data/####/146x146_4ED54400-4C4B-4368-AFA8-6ED76C38D4E6.jpg
  • /data/data/####/146x146_558ED4C3-FA4A-471E-9D21-89BDFA5498EF.jpg
  • /data/data/####/146x146_78ABD9FA-AD10-4E05-B183-8DB327CBF0AB.jpg
  • /data/data/####/146x146_7908AAF4-668B-4148-819B-68E163433ACC.jpg
  • /data/data/####/146x146_7D56912C-4FF7-4A2F-8538-217CDF5C4B6B.jpg
  • /data/data/####/146x146_7DFA6F41-C623-4114-A490-E7D5DAB989B1.jpg
  • /data/data/####/146x146_8E035A23-03CD-4EC8-84CF-00E3D86C8DD9.jpg
  • /data/data/####/146x146_8F0DA200-5B83-46DB-BD93-4CB8A0084479.jpg
  • /data/data/####/146x146_94FF39CA-7622-42D6-9AFA-BC4C1AB6E31A.jpg
  • /data/data/####/146x146_D17E1FE5-05D0-425E-BA25-7C3D9FD8F70F.jpg
  • /data/data/####/146x146_FC8976E3-8904-472A-BA54-CE2CC718161B.jpg
  • /data/data/####/146x146_FF010BB1-4FFF-4000-961A-E898CF9DC049.jpg
  • /data/data/####/148x148_180CC29A-C958-4188-86CF-B2E3B5883372.jpg
  • /data/data/####/148x148_18975690-F517-4747-9F36-FC8329113AA3.jpg
  • /data/data/####/148x148_1AA44376-67F6-4CE0-9CEC-F46B06F64440.jpg
  • /data/data/####/148x148_1C0364A8-E9A1-4621-89C1-A2E38FCC7F89.jpg
  • /data/data/####/148x148_33626C26-2FB8-4620-B807-1612A306C943.jpg
  • /data/data/####/148x148_387B1CF8-850F-49DB-B7FD-43417AC6E4B0.jpg
  • /data/data/####/148x148_44C573CC-D136-475F-BFBC-3F8BAF29EC44.jpg
  • /data/data/####/148x148_45B2A259-97FA-4A6E-8A43-B8F6C63AFE0A.jpg
  • /data/data/####/148x148_498EA363-8835-4D1B-B559-3FD619B1F843.jpg
  • /data/data/####/148x148_50D3AFB1-9D9E-40A3-B7D6-4407AAD9FC68.jpg
  • /data/data/####/148x148_5D378E1C-CCE2-46CF-83C4-843137CD1DA6.jpg
  • /data/data/####/148x148_673F5897-91F7-4208-A286-3CA465BB81CA.jpg
  • /data/data/####/148x148_68D488CF-02F0-45C8-930E-DAC6CEC14107.jpg
  • /data/data/####/148x148_6D94A4B8-7EE2-4F7C-89C2-4C9357029F5F.jpg
  • /data/data/####/148x148_6EC647CA-3F2A-491A-9D43-F1CFA0D9AD3C.jpg
  • /data/data/####/148x148_78D072D9-E6C6-4566-9069-360651BEA6F6.jpg
  • /data/data/####/148x148_919E0151-19C3-43E7-B3B8-51B00E80AE56.jpg
  • /data/data/####/148x148_954BC774-AFA3-4BD7-B79B-9897932A2E26.jpg
  • /data/data/####/148x148_99FBC928-1692-49CA-9532-62E00C54144B.jpg
  • /data/data/####/148x148_9D78C47B-BD86-448C-9376-224ABB714442.jpg
  • /data/data/####/148x148_A29D3935-B392-444F-A3B5-E283738D12B8.jpg
  • /data/data/####/148x148_A2BAC03D-C104-42AE-A598-E6B5E6AAB486.jpg
  • /data/data/####/148x148_A4E5FD28-8644-4658-9C4C-6A0FBA35766E.jpg
  • /data/data/####/148x148_A541FE36-0F38-4001-851F-5F456C61D3DE.jpg
  • /data/data/####/148x148_A6EFAA47-D115-430F-8F82-935BE8C49801.jpg
  • /data/data/####/148x148_AAD02ABF-D7AE-467A-B4EA-026B65ACB1C0.jpg
  • /data/data/####/148x148_AE1E2530-EDC3-4BF0-9CBC-D38E456B79DF.jpg
  • /data/data/####/148x148_B1DF03CC-034E-4FC2-8693-E1BC9FB9B493.jpg
  • /data/data/####/148x148_B21C5477-9C78-4C8C-BF79-6E123731BA47.jpg
  • /data/data/####/148x148_B3A67D32-84E4-428B-BBEC-E0C414B71015.jpg
  • /data/data/####/148x148_B3B73E14-2CF3-48A7-B7CD-BE1F20104D0F.jpg
  • /data/data/####/148x148_B83B0D75-2BF9-4481-BC79-365B77B4542A.jpg
  • /data/data/####/148x148_BE133540-62C2-4A2F-99DA-47EBE698DADB.jpg
  • /data/data/####/148x148_D17D9B09-AA86-41CB-8F19-0CB635452FCC.jpg
  • /data/data/####/148x148_D3D1D0F4-5782-4070-B4D1-A0A5E0482F0A.jpg
  • /data/data/####/148x148_D4FD3176-B4D5-4B80-B5F5-45B8E43EBCA2.jpg
  • /data/data/####/148x148_D857B1B5-89B9-48A2-99A2-6E91E9D8D17C.jpg
  • /data/data/####/148x148_F07613A7-D082-4256-A195-D091EE346238.jpg
  • /data/data/####/148x148_F3EFCFFC-9F23-472B-BDD4-FFB5CF75E700.jpg
  • /data/data/####/180CC29A-C958-4188-86CF-B2E3B5883372.ikb
  • /data/data/####/180CC29A-C958-4188-86CF-B2E3B5883372.jpg
  • /data/data/####/18975690-F517-4747-9F36-FC8329113AA3.ikb
  • /data/data/####/18975690-F517-4747-9F36-FC8329113AA3.jpg
  • /data/data/####/18CF634A-F5F7-454C-85EA-7AA343F18910.ikb
  • /data/data/####/18CF634A-F5F7-454C-85EA-7AA343F18910.jpg
  • /data/data/####/1AA44376-67F6-4CE0-9CEC-F46B06F64440.ikb
  • /data/data/####/1AA44376-67F6-4CE0-9CEC-F46B06F64440.jpg
  • /data/data/####/1C0364A8-E9A1-4621-89C1-A2E38FCC7F89.ikb
  • /data/data/####/1C0364A8-E9A1-4621-89C1-A2E38FCC7F89.jpg
  • /data/data/####/2CA92D5D-221F-47A6-A02B-2236F676E4FA.ikb
  • /data/data/####/2CA92D5D-221F-47A6-A02B-2236F676E4FA.jpg
  • /data/data/####/2E0BE7DE-B9DA-4709-A69E-D2FA2F5E3939.ikb
  • /data/data/####/2E0BE7DE-B9DA-4709-A69E-D2FA2F5E3939.jpg
  • /data/data/####/33626C26-2FB8-4620-B807-1612A306C943.ikb
  • /data/data/####/33626C26-2FB8-4620-B807-1612A306C943.jpg
  • /data/data/####/3732A473-706E-434D-871D-22A71D340048.ikb
  • /data/data/####/3732A473-706E-434D-871D-22A71D340048.jpg
  • /data/data/####/387B1CF8-850F-49DB-B7FD-43417AC6E4B0.ikb
  • /data/data/####/387B1CF8-850F-49DB-B7FD-43417AC6E4B0.jpg
  • /data/data/####/3975DAF0-57D5-4308-BD78-139B64813421.ikb
  • /data/data/####/3975DAF0-57D5-4308-BD78-139B64813421.jpg
  • /data/data/####/44C573CC-D136-475F-BFBC-3F8BAF29EC44.ikb
  • /data/data/####/44C573CC-D136-475F-BFBC-3F8BAF29EC44.jpg
  • /data/data/####/45B2A259-97FA-4A6E-8A43-B8F6C63AFE0A.ikb
  • /data/data/####/45B2A259-97FA-4A6E-8A43-B8F6C63AFE0A.jpg
  • /data/data/####/498EA363-8835-4D1B-B559-3FD619B1F843.ikb
  • /data/data/####/498EA363-8835-4D1B-B559-3FD619B1F843.jpg
  • /data/data/####/4ED54400-4C4B-4368-AFA8-6ED76C38D4E6.ikb
  • /data/data/####/4ED54400-4C4B-4368-AFA8-6ED76C38D4E6.jpg
  • /data/data/####/50D3AFB1-9D9E-40A3-B7D6-4407AAD9FC68.ikb
  • /data/data/####/50D3AFB1-9D9E-40A3-B7D6-4407AAD9FC68.jpg
  • /data/data/####/558ED4C3-FA4A-471E-9D21-89BDFA5498EF.ikb
  • /data/data/####/558ED4C3-FA4A-471E-9D21-89BDFA5498EF.jpg
  • /data/data/####/586x450_3732A473-706E-434D-871D-22A71D340048.jpg
  • /data/data/####/586x450_94FF39CA-7622-42D6-9AFA-BC4C1AB6E31A.jpg
  • /data/data/####/586x450_D17E1FE5-05D0-425E-BA25-7C3D9FD8F70F.jpg
  • /data/data/####/586x450_FF010BB1-4FFF-4000-961A-E898CF9DC049.jpg
  • /data/data/####/5D378E1C-CCE2-46CF-83C4-843137CD1DA6.ikb
  • /data/data/####/5D378E1C-CCE2-46CF-83C4-843137CD1DA6.jpg
  • /data/data/####/673F5897-91F7-4208-A286-3CA465BB81CA.ikb
  • /data/data/####/673F5897-91F7-4208-A286-3CA465BB81CA.jpg
  • /data/data/####/68D488CF-02F0-45C8-930E-DAC6CEC14107.ikb
  • /data/data/####/68D488CF-02F0-45C8-930E-DAC6CEC14107.jpg
  • /data/data/####/6D94A4B8-7EE2-4F7C-89C2-4C9357029F5F.ikb
  • /data/data/####/6D94A4B8-7EE2-4F7C-89C2-4C9357029F5F.jpg
  • /data/data/####/6EC647CA-3F2A-491A-9D43-F1CFA0D9AD3C.ikb
  • /data/data/####/6EC647CA-3F2A-491A-9D43-F1CFA0D9AD3C.jpg
  • /data/data/####/70da19a7-ffc5-4d73-9e36-81ef28eb6a29
  • /data/data/####/78ABD9FA-AD10-4E05-B183-8DB327CBF0AB.ikb
  • /data/data/####/78ABD9FA-AD10-4E05-B183-8DB327CBF0AB.jpg
  • /data/data/####/78D072D9-E6C6-4566-9069-360651BEA6F6.ikb
  • /data/data/####/78D072D9-E6C6-4566-9069-360651BEA6F6.jpg
  • /data/data/####/7908AAF4-668B-4148-819B-68E163433ACC.ikb
  • /data/data/####/7908AAF4-668B-4148-819B-68E163433ACC.jpg
  • /data/data/####/7D56912C-4FF7-4A2F-8538-217CDF5C4B6B.ikb
  • /data/data/####/7D56912C-4FF7-4A2F-8538-217CDF5C4B6B.jpg
  • /data/data/####/7DFA6F41-C623-4114-A490-E7D5DAB989B1.ikb
  • /data/data/####/7DFA6F41-C623-4114-A490-E7D5DAB989B1.jpg
  • /data/data/####/8E035A23-03CD-4EC8-84CF-00E3D86C8DD9.ikb
  • /data/data/####/8E035A23-03CD-4EC8-84CF-00E3D86C8DD9.jpg
  • /data/data/####/8F0DA200-5B83-46DB-BD93-4CB8A0084479.ikb
  • /data/data/####/8F0DA200-5B83-46DB-BD93-4CB8A0084479.jpg
  • /data/data/####/919E0151-19C3-43E7-B3B8-51B00E80AE56.ikb
  • /data/data/####/919E0151-19C3-43E7-B3B8-51B00E80AE56.jpg
  • /data/data/####/94FF39CA-7622-42D6-9AFA-BC4C1AB6E31A.ikb
  • /data/data/####/94FF39CA-7622-42D6-9AFA-BC4C1AB6E31A.jpg
  • /data/data/####/954BC774-AFA3-4BD7-B79B-9897932A2E26.ikb
  • /data/data/####/954BC774-AFA3-4BD7-B79B-9897932A2E26.jpg
  • /data/data/####/99FBC928-1692-49CA-9532-62E00C54144B.ikb
  • /data/data/####/99FBC928-1692-49CA-9532-62E00C54144B.jpg
  • /data/data/####/9D78C47B-BD86-448C-9376-224ABB714442.ikb
  • /data/data/####/9D78C47B-BD86-448C-9376-224ABB714442.jpg
  • /data/data/####/A29D3935-B392-444F-A3B5-E283738D12B8.ikb
  • /data/data/####/A29D3935-B392-444F-A3B5-E283738D12B8.jpg
  • /data/data/####/A2BAC03D-C104-42AE-A598-E6B5E6AAB486.ikb
  • /data/data/####/A2BAC03D-C104-42AE-A598-E6B5E6AAB486.jpg
  • /data/data/####/A4E5FD28-8644-4658-9C4C-6A0FBA35766E.ikb
  • /data/data/####/A4E5FD28-8644-4658-9C4C-6A0FBA35766E.jpg
  • /data/data/####/A541FE36-0F38-4001-851F-5F456C61D3DE.ikb
  • /data/data/####/A541FE36-0F38-4001-851F-5F456C61D3DE.jpg
  • /data/data/####/A6EFAA47-D115-430F-8F82-935BE8C49801.ikb
  • /data/data/####/A6EFAA47-D115-430F-8F82-935BE8C49801.jpg
  • /data/data/####/AAD02ABF-D7AE-467A-B4EA-026B65ACB1C0.ikb
  • /data/data/####/AAD02ABF-D7AE-467A-B4EA-026B65ACB1C0.jpg
  • /data/data/####/AE1E2530-EDC3-4BF0-9CBC-D38E456B79DF.ikb
  • /data/data/####/AE1E2530-EDC3-4BF0-9CBC-D38E456B79DF.jpg
  • /data/data/####/B1DF03CC-034E-4FC2-8693-E1BC9FB9B493.ikb
  • /data/data/####/B1DF03CC-034E-4FC2-8693-E1BC9FB9B493.jpg
  • /data/data/####/B21C5477-9C78-4C8C-BF79-6E123731BA47.ikb
  • /data/data/####/B21C5477-9C78-4C8C-BF79-6E123731BA47.jpg
  • /data/data/####/B3A67D32-84E4-428B-BBEC-E0C414B71015.ikb
  • /data/data/####/B3A67D32-84E4-428B-BBEC-E0C414B71015.jpg
  • /data/data/####/B3B73E14-2CF3-48A7-B7CD-BE1F20104D0F.ikb
  • /data/data/####/B3B73E14-2CF3-48A7-B7CD-BE1F20104D0F.jpg
  • /data/data/####/B83B0D75-2BF9-4481-BC79-365B77B4542A.ikb
  • /data/data/####/B83B0D75-2BF9-4481-BC79-365B77B4542A.jpg
  • /data/data/####/BE133540-62C2-4A2F-99DA-47EBE698DADB.ikb
  • /data/data/####/BE133540-62C2-4A2F-99DA-47EBE698DADB.jpg
  • /data/data/####/D17D9B09-AA86-41CB-8F19-0CB635452FCC.ikb
  • /data/data/####/D17D9B09-AA86-41CB-8F19-0CB635452FCC.jpg
  • /data/data/####/D17E1FE5-05D0-425E-BA25-7C3D9FD8F70F.ikb
  • /data/data/####/D17E1FE5-05D0-425E-BA25-7C3D9FD8F70F.jpg
  • /data/data/####/D3D1D0F4-5782-4070-B4D1-A0A5E0482F0A.ikb
  • /data/data/####/D3D1D0F4-5782-4070-B4D1-A0A5E0482F0A.jpg
  • /data/data/####/D4FD3176-B4D5-4B80-B5F5-45B8E43EBCA2.ikb
  • /data/data/####/D4FD3176-B4D5-4B80-B5F5-45B8E43EBCA2.jpg
  • /data/data/####/D857B1B5-89B9-48A2-99A2-6E91E9D8D17C.ikb
  • /data/data/####/D857B1B5-89B9-48A2-99A2-6E91E9D8D17C.jpg
  • /data/data/####/F07613A7-D082-4256-A195-D091EE346238.ikb
  • /data/data/####/F07613A7-D082-4256-A195-D091EE346238.jpg
  • /data/data/####/F3EFCFFC-9F23-472B-BDD4-FFB5CF75E700.ikb
  • /data/data/####/F3EFCFFC-9F23-472B-BDD4-FFB5CF75E700.jpg
  • /data/data/####/FC8976E3-8904-472A-BA54-CE2CC718161B.ikb
  • /data/data/####/FC8976E3-8904-472A-BA54-CE2CC718161B.jpg
  • /data/data/####/FF010BB1-4FFF-4000-961A-E898CF9DC049.ikb
  • /data/data/####/FF010BB1-4FFF-4000-961A-E898CF9DC049.jpg
  • /data/data/####/Meta.json
  • /data/data/####/SUBOXLOG_
  • /data/data/####/acba8dd8-8d13-4859-a942-81dc3741edb5.jar
  • /data/data/####/affe3564-8ff2-439b-9565-0a32c6678d30.jar
  • /data/data/####/cf180845-bd9a-430f-a59b-7f578bfc4252
  • /data/data/####/com.google.android.gms.measurement.prefs.xml
  • /data/data/####/com.google.android.gms.measurement.prefs.xml.bak
  • /data/data/####/com.mixpanel.android.mpmetrics.MixpanelAPI_fb84...45.xml
  • /data/data/####/com.shanweimin.cn-1.apk.classes-1355761484.zip
  • /data/data/####/d83bd78a-0b35-4bcd-b527-62290808cdc3.jar
  • /data/data/####/dwerdd.db-journal
  • /data/data/####/libpcdn_acc.zip
  • /data/data/####/libpcdn_acc_new.so
  • /data/data/####/mivmi.xml
  • /data/data/####/mixpanel
  • /data/data/####/mixpanel-journal
  • /data/data/####/mixpanel.viewcrawler.changesfb84fd97d86e0c6cbac...45.xml
  • /data/data/####/multidex.version.xml
  • /data/data/####/pcdnconfigs.xml
  • /data/data/####/prefs.xml
  • /data/data/####/v.jar
  • /data/media/####/130f633b07416
  • /data/media/####/447d791b372ec
  • /data/media/####/773f3178813829c89699c12a7df15356.apk
  • /data/media/####/9a78a4c40f484
  • /data/media/####/BC8C573C-3DAE-4232-B480-BDD8785A168B.gif
  • /data/media/####/cl.tmp
  • /data/media/####/ds.tmp
  • /data/media/####/e34f0fd97c838
  • /data/media/####/f306f8dd83b9f
  • /data/media/####/fa2fabab4a695
  • /data/media/####/myself.dat
Miscellaneous:
Executes the following shell scripts:
  • chmod 777 /storage/emulated/0/spxin/773f3178813829c89699c12a7df15356.apk
  • ls -l /system/bin/su
Loads the following dynamic libraries:
  • gifflen
  • inkboard
  • libpcdn_acc
  • pcdn_acc
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android