Technical information
- Android.BankBot.Coper.12.origin
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) gmscomp####.google####.com:443
- TCP(TLS/1.0) pethso####.com:443
- TCP(TLS/1.0) 1####.250.199.174:443
- TCP(TLS/1.0) rr18---####.g####.com:443
- TCP(TLS/1.0) 1####.217.175.10:443
- TCP(TLS/1.0) 2####.239.36.223:443
- TCP(TLS/1.2) 1####.177.14.99:443
- TCP(TLS/1.2) 1####.250.183.163:443
- TCP(TLS/1.2) 1####.217.175.10:443
- TCP(TLS/1.2) 64.2####.165.95:443
- TCP(TLS/1.2) 1####.251.1.95:443
- TCP(TLS/1.2) 64.2####.161.95:443
- TCP(TLS/1.2) 1####.250.150.95:443
- 2pethso####.com
- 3pethso####.com
- 4pethso####.com
- 5pethso####.com
- 6pethso####.com
- gmscomp####.google####.com
- pethso####.com
- rr18---####.g####.com
- pethso####.com:443/MzQ1Yzk1ZGQ4ODY3/
- /data/data/####/kl.txt
- /data/data/####/main.xml
- /data/data/####/main.xml.bak
- /data/data/####/main.xml.bak (deleted)
- /data/data/####/proc_auxv
- /data/data/####/zfqdctjlqt
- /data/data/####/zfqdctjlqt.dex
- /data/data/####/zfqdctjlqt.dex.flock (deleted)
- libbBnJCTFz
- AES-ECB-PKCS5Padding
- AES-ECB-PKCS5Padding