Android.Locker.16712

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Locker.14669

Threat detection based on machine learning.

Network activity:

Connects to:

UDP(DNS) 8####.8.4.4:53
TCP(TLS/1.0) www.go####.com:443
TCP(TLS/1.0) ads.traffic####.net:443
TCP(TLS/1.0) i.dy####.com:443
TCP(TLS/1.0) www.googlet####.com:443
TCP(TLS/1.0) di.ph####.com:443
TCP(TLS/1.0) dy####.com:443
TCP(TLS/1.0) pla####.google####.com:443
TCP(TLS/1.0) h####.por####.com:443
TCP(TLS/1.0) sto####.google####.com:443
TCP(TLS/1.0) s####.g.doublec####.net:443
TCP(TLS/1.0) i.bimbo####.com:443
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) hw-####.a####.com:443
TCP(TLS/1.0) 64.2####.164.94:443
TCP(TLS/1.0) www.google-####.com:443
TCP(TLS/1.0) ht-####.a####.com:443
TCP(TLS/1.0) www.por####.com:443
TCP(TLS/1.0) and####.a####.go####.com:443
TCP(TLS/1.0) rr13---####.g####.com:443
TCP(TLS/1.0) www.go####.ru:443
TCP(TLS/1.0) m####.traffic####.net:443
TCP(TLS/1.0) st####.traffic####.com:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.0) cdn1-sm####.ph####.com:443
TCP(TLS/1.2) and####.google####.com:443
TCP(TLS/1.2) 64.2####.164.94:443

DNS requests:

ads.traffic####.net
and####.a####.go####.com
and####.google####.com
cdn1-sm####.ph####.com
di.ph####.com
dy####.com
ei.ph####.com
h####.por####.com
ht-####.a####.com
hw-####.a####.com
i.bimbo####.com
i.dy####.com
i.dy####.com.####.8
m####.traffic####.net
p####.google####.com
pla####.google####.com
rr13---####.g####.com
s####.g.doublec####.net
st####.traffic####.com
sto####.google####.com
www.go####.com
www.go####.ru
www.google-####.com
www.googlet####.com
www.por####.com

File system changes:

Creates the following files:

/data/data/####/000001.dbtmp
/data/data/####/04436673b49ad5af_0
/data/data/####/0495323fbd7e846b_0
/data/data/####/064e5073fc92e16d_0
/data/data/####/06e2cee4a3a05915_0
/data/data/####/070e1c75cc2bf6ca_0
/data/data/####/070e1c75cc2bf6ca_1
/data/data/####/07189ede4336c7e4_0
/data/data/####/07ee69cc741fb11f_0
/data/data/####/082d22645e74c1df_0
/data/data/####/082d22645e74c1df_1
/data/data/####/09456025483146c3_0
/data/data/####/09456025483146c3_1
/data/data/####/09d0084e76424ead_0
/data/data/####/0a364fb28e1eff70_0
/data/data/####/0a364fb28e1eff70_1
/data/data/####/0ba25789d2ed8c11_0
/data/data/####/0bd2dabd82bf6015_0
/data/data/####/0c0a08dc871f5cb5_0 (deleted)
/data/data/####/0ce05511738fcd6d_0
/data/data/####/0d465e2c857a3e51_0 (deleted)
/data/data/####/0d6dfed0ad738ffb_0 (deleted)
/data/data/####/0e603bbf46e404f6_0
/data/data/####/0eafde0a79fe0c3e_0
/data/data/####/1122776225bc75cd_0
/data/data/####/11e6d0c100ef6553_0
/data/data/####/11e6d0c100ef6553_1
/data/data/####/123343380b18c9aa_0
/data/data/####/123343380b18c9aa_1
/data/data/####/12a6ab2820351259_0
/data/data/####/13d2472b524bec67_0 (deleted)
/data/data/####/13e77088e80af0e8_0
/data/data/####/13e77088e80af0e8_1
/data/data/####/154711c656ad29e1_0
/data/data/####/154711c656ad29e1_1
/data/data/####/1756e6fdc0b163e8_0
/data/data/####/1a9a94a055e8cd01_0
/data/data/####/1bfa67741787ffac_0 (deleted)
/data/data/####/1c3aae2ffc5a59d8_0
/data/data/####/1d8548926f2f7dff_0
/data/data/####/1d8548926f2f7dff_1
/data/data/####/1dd4027764dcb0b4_0
/data/data/####/1dd4027764dcb0b4_1
/data/data/####/1ebc095dcf3815ea_0
/data/data/####/1f2710207c06c3b0_0
/data/data/####/1f72faaf6635285f_0
/data/data/####/1ff6eb52b3b0ef50_0 (deleted)
/data/data/####/22bd7212a88e28b2_0
/data/data/####/237848a5465940b3_0
/data/data/####/2626055c46f21cb2_0
/data/data/####/26966e3274a780fb_0
/data/data/####/2719f71f98afc17f_0
/data/data/####/27eedaa5d8cc9846_0
/data/data/####/283a745f6cedd5bb_0
/data/data/####/283a745f6cedd5bb_1
/data/data/####/2940195bd9870d6e_0
/data/data/####/2940195bd9870d6e_1
/data/data/####/2b399769af386fe9_0
/data/data/####/2b92c470956cd8c0_0
/data/data/####/2b92c470956cd8c0_1
/data/data/####/2cc80dabc69f58b6_0
/data/data/####/2dcb295b6a2c1989_0
/data/data/####/2dcb295b6a2c1989_1
/data/data/####/30962397128b8a05_0
/data/data/####/3145b55246c2d428_0
/data/data/####/3149436a7d467421_0
/data/data/####/314fbfefd8632fd9_0
/data/data/####/33474d826c1f993c_0
/data/data/####/334ae7ef26a9ec4c_0
/data/data/####/341b5b8df6d99622_0
/data/data/####/347a29f0deff572a_0
/data/data/####/35e4224f77da7e6f_0
/data/data/####/36c62ff07cf64437_0
/data/data/####/373ee0918b0e1063_0
/data/data/####/373ee0918b0e1063_1
/data/data/####/39798ea98ce8f4c8_0
/data/data/####/3e4b25ee9b2ba9a8_0
/data/data/####/3e777eec27047eb4_0 (deleted)
/data/data/####/3ea4d78ea985ea67_0
/data/data/####/40807e6cf8f26752_0
/data/data/####/42104658c729135e_0
/data/data/####/42104658c729135e_1
/data/data/####/4273aeb88b409fb4_0
/data/data/####/42ae9024636dd0d3_0
/data/data/####/42b8abcb72bedda4_0
/data/data/####/43bb056573be5e2e_0
/data/data/####/459e23e99f0e512d_0 (deleted)
/data/data/####/491d119825a7ff4e_0 (deleted)
/data/data/####/4a8831bb5f6f1fb4_0
/data/data/####/4ac6e9671e899d1b_0
/data/data/####/4cb013792b196a35_0
/data/data/####/4cb013792b196a35_1
/data/data/####/4e209070bb4007d8_0
/data/data/####/4ed92342b9895a0f_0
/data/data/####/4ed92342b9895a0f_1
/data/data/####/509989abafc775ab_0
/data/data/####/51daf11059045dea_0
/data/data/####/537f63bdde18696f_0
/data/data/####/54ca7797d4a8adbd_0
/data/data/####/556b00d49d2f0647_0
/data/data/####/56cbfccaf25bb48a_0
/data/data/####/576113786a6fe5b7_0
/data/data/####/57b41eae62d0b53b_0
/data/data/####/59703c9b6b151b60_0
/data/data/####/5a10956f90e1b6ad_0
/data/data/####/5bafd5dc46764e98_0
/data/data/####/5bafd5dc46764e98_1
/data/data/####/5c753e04fcb38dae_0
/data/data/####/5ca24638459ec86c_0
/data/data/####/5cfa720669f20d17_0
/data/data/####/5eafc2a0220fb51c_0
/data/data/####/5eafc2a0220fb51c_1
/data/data/####/5edeeecea831989a_0
/data/data/####/6089a435b6d034e1_0
/data/data/####/6162e4075410c14b_0
/data/data/####/618c35c26cb1951f_0
/data/data/####/62911b0e3b013ec7_0 (deleted)
/data/data/####/62c7a4b13f61aac3_0
/data/data/####/64508fa1cd46b0ab_0
/data/data/####/64508fa1cd46b0ab_1
/data/data/####/64abd656040ac1b9_0 (deleted)
/data/data/####/66e7834481663201_0
/data/data/####/66e7834481663201_1
/data/data/####/681966c47836a394_0
/data/data/####/682a72a4190d86f5_0
/data/data/####/6935d81685e9ea83_0
/data/data/####/6cf8a266766c39c6_0
/data/data/####/6e178f8d0f0c587b_0
/data/data/####/6fe05901eb6ac3dc_0
/data/data/####/701d95dce24c67ff_0
/data/data/####/701d95dce24c67ff_1
/data/data/####/7066d884af61cd67_0
/data/data/####/727cc798eb247213_0
/data/data/####/7403236690f91b38_0
/data/data/####/740d54dffff52643_0
/data/data/####/76a4b7cfca4e5a3c_0
/data/data/####/76f6f74d2e07f935_0
/data/data/####/76f6f74d2e07f935_1
/data/data/####/7783082b7fc034c4_0 (deleted)
/data/data/####/78d5957667962475_0
/data/data/####/79ea978d85bb280d_0
/data/data/####/79ea978d85bb280d_1
/data/data/####/79efbc89d84dd4a3_0
/data/data/####/7c36fcfeed892bef_0 (deleted)
/data/data/####/80f468ecf75b6b3f_0
/data/data/####/81eab523811d01cf_0
/data/data/####/83a7ba793820430f_0
/data/data/####/846457eadd435afe_0
/data/data/####/86aed613d38e8cb1_0
/data/data/####/8739796a6a987825_0 (deleted)
/data/data/####/8888bac454c36fa6_0
/data/data/####/8888bac454c36fa6_1
/data/data/####/891807cd26ba8414_0
/data/data/####/8a2497cb3bd3da77_0
/data/data/####/8b90123048c6566c_0
/data/data/####/8d7bcb943845318f_0
/data/data/####/8ebe8f3fbd2b919a_0
/data/data/####/8f21d9f2c484e5a8_0 (deleted)
/data/data/####/9397b8edaa54a35c_0
/data/data/####/9402ef73a016ffbb_0
/data/data/####/94127338ac5a4c58_0
/data/data/####/94cc9766416d6168_0 (deleted)
/data/data/####/95cae56d052c205b_0
/data/data/####/96fc0a51f0d71a3a_0
/data/data/####/9718cff343aade08_0
/data/data/####/971bda8e30cee8c3_0
/data/data/####/98475910ab166a6d_0 (deleted)
/data/data/####/9c153392850a10c8_0
/data/data/####/9d0ec0b1c17328a2_0
/data/data/####/9e1643f8bcd70229_0
/data/data/####/9ef6af65c92b4e10_0
/data/data/####/Cookies-journal
/data/data/####/CvOWxnyYO.dex
/data/data/####/CvOWxnyYO.dex.flock (deleted)
/data/data/####/Databases.db-journal
/data/data/####/DxnEajBfM.dex
/data/data/####/DxnEajBfM.dex.flock (deleted)
/data/data/####/HKBrbU.dex
/data/data/####/HKBrbU.dex.flock (deleted)
/data/data/####/MANIFEST-000001
/data/data/####/QuotaManager-journal
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/a01297cbe3b4cc43_0
/data/data/####/a1a0eb390b604316_0
/data/data/####/a1a0eb390b604316_1
/data/data/####/a2573e6be5adfc65_0
/data/data/####/a658c69a924de5d6_0
/data/data/####/a681c5c7206bfb57_0
/data/data/####/a681c5c7206bfb57_1
/data/data/####/a9d56e07f351f496_0
/data/data/####/ab5ced6f83c91eb1_0
/data/data/####/aeafe34adc808330_0
/data/data/####/aeafe34adc808330_1
/data/data/####/aede4a1981962477_0
/data/data/####/b005f0e09bcda986_0
/data/data/####/b088c912433d5779_0
/data/data/####/b1838d737df25916_0
/data/data/####/b2575f6ecf380ef9_0
/data/data/####/b3128d903b922a4b_0
/data/data/####/b3128d903b922a4b_1
/data/data/####/b3314afd92314ec3_0
/data/data/####/b3586d6b2f08f6d5_0 (deleted)
/data/data/####/b384dca41fc1c3ec_0 (deleted)
/data/data/####/b4461795d0e678d4_0
/data/data/####/b66eee9babb5b297_0
/data/data/####/b66eee9babb5b297_1
/data/data/####/b8d2598fcbaf08da_0
/data/data/####/b908bbd11f43c817_0
/data/data/####/b9a92daa51328506_0
/data/data/####/bb6b25dc800f4697_0
/data/data/####/bd49ffa69488246a_0
/data/data/####/bdbc1c11fcc1ed1c_0
/data/data/####/bdbc1c11fcc1ed1c_1
/data/data/####/bfe13fbb65a7c72c_0
/data/data/####/c08f10363fecd3e5_0
/data/data/####/c14ca00c05ad58f4_0
/data/data/####/c18c7ed5326fbd20_0
/data/data/####/c1cf8893aa1fad2b_0
/data/data/####/c281f7888a4df1a5_0
/data/data/####/c3b7f75ab229848e_0
/data/data/####/c6a495632c46f4a6_0
/data/data/####/c6ccc8882a914868_0
/data/data/####/c6ccc8882a914868_1
/data/data/####/c7c3b1085e4518d7_0
/data/data/####/ca58de0edd185247_0
/data/data/####/cbdbca0830988ca4_0
/data/data/####/ccb6ae163afebfc0_0
/data/data/####/cf18e0c453784e16_0 (deleted)
/data/data/####/com.xcowrvurn_preferences.xml
/data/data/####/d11c328c56d593fd_0 (deleted)
/data/data/####/d26e7ea5458a253b_0
/data/data/####/d2e8b4f6829a7894_0
/data/data/####/d2e8b4f6829a7894_1
/data/data/####/d77d655ec40a4bfd_0
/data/data/####/d97ac7dfd2b9e438_0
/data/data/####/db7aed9237363e91_0
/data/data/####/dcb4f461fa467c56_0
/data/data/####/dcb4f461fa467c56_1
/data/data/####/e06e2b9891100227_0
/data/data/####/e1f8b191708996b7_0
/data/data/####/e256db72a5930dd5_0 (deleted)
/data/data/####/e27135496fdd7f9b_0
/data/data/####/e27135496fdd7f9b_1
/data/data/####/e3da7782931ec491_0
/data/data/####/e3da7782931ec491_1
/data/data/####/e52a13e2518a2e26_0
/data/data/####/e8f2ee29569197b1_0
/data/data/####/e945f36102d666c1_0
/data/data/####/e945f36102d666c1_1
/data/data/####/e9a39d8fa963661d_0
/data/data/####/ea7a48525293034f_0
/data/data/####/eba3cd528ad843d3_0 (deleted)
/data/data/####/ebd1bdfb66e8fe4b_0
/data/data/####/ebd1bdfb66e8fe4b_1
/data/data/####/ed71c2b27bd9ab4e_0
/data/data/####/ee2cfa7c190cc7cf_0
/data/data/####/ee2cfa7c190cc7cf_1
/data/data/####/ee6837cd4c8f51d4_0
/data/data/####/ee6837cd4c8f51d4_1
/data/data/####/eee181dabf4f3e40_0 (deleted)
/data/data/####/efd687c859782d02_0
/data/data/####/effd37cf07a9b470_0 (deleted)
/data/data/####/f075318f48612f8a_0
/data/data/####/f11db3ae841b835e_0
/data/data/####/f11db3ae841b835e_1
/data/data/####/f1bea89dd5e36a01_0
/data/data/####/f1d8329cfe43666a_0
/data/data/####/f1d8329cfe43666a_1
/data/data/####/f1f35cebda9b8533_0
/data/data/####/f41f2952d0b2c2c7_0
/data/data/####/f41f2952d0b2c2c7_1
/data/data/####/f5fa9c6556e1c73b_0
/data/data/####/f5fa9c6556e1c73b_1
/data/data/####/f8d36614af171c8b_0
/data/data/####/f92a7fc5ff43cef3_0
/data/data/####/fb6b3684ddfb2b99_0
/data/data/####/fbb824bf07508d86_0
/data/data/####/fee6ef73fdd6723e_0
/data/data/####/ffde5e38a7ef08ae_0
/data/data/####/index
/data/data/####/metrics_guid
/data/data/####/the-real-index
/data/data/####/vnuPiYFX.dex
/data/data/####/vnuPiYFX.dex.flock (deleted)
/data/misc/####/primary.prof

Miscellaneous:

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Displays its own windows over windows of other apps.

Technologies

Terminology

Training and education

Myths

Technical information

Curing recommendations

Free trial