Technical information
Malicious functions:
Sends SMS messages:
- 8844: 404
Network activity:
Connecting to:
- s####.####.com
- con####.####.net
- aw####.com
- platfor####.####.com
- analy####.####.com
- scholar####.com
- f####.####.com
- awash####.com
- con####.####.com
- l####.####.com
- m####.####.com
- you####.com
- a####.####.com
- pag####.####.com
HTTP GET requests:
- s####.####.com/wp-content/themes/canvas/includes/js/modernizr.min.js?ver=####
- awash####.com/wp-content/uploads/2017/02/37559589_301-600x220.jpg
- s####.####.com/wp-includes/js/jquery/jquery.js?ver=####
- awash####.com/wp-content/themes/skt-the-app/css/style_base.css?ver=####
- s####.####.com/wp-content/themes/canvas-child/custom.css
- s####.####.com/wp-content/themes/canvas/style.css
- awash####.com/wp-content/plugins/siteorigin-panels/css/front.css?ver=####
- f####.####.com/form/26/427385726.js
- awash####.com/wp-content/uploads/2017/02/37401644_301-600x220.jpg
- analy####.####.com/images/cq_blank.gif?_sw_id=####&_sw_uid=####&_sw_fp=####&_sw_pl=####&_sw_pc=####&_sw_dat####&to=####
- awash####.com/wp-content/themes/skt-the-app/js/custom.js?ver=####
- s####.####.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=####
- awash####.com/wp-content/uploads/2017/02/fruit-600x220.jpg
- s####.####.com/wp-content/themes/canvas/includes/fonts/social.ttf
- awash####.com/wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=####
- s####.####.com/static/layers.0da87076074724862c1b.js
- awash####.com/wp-includes/js/jquery/jquery.js?ver=####
- scholar####.com/wp-content/uploads/2015/10/full-mba-scholarships-bg.jpg
- awash####.com/wp-content/plugins/advanced-post-slider/js/advps.frnt.script.js?ver=####
- awash####.com/wp-content/plugins/download-monitor/assets/css/frontend.css?ver=####
- awash####.com/shop-2/
- awash####.com/wp-content/themes/skt-the-app/js/jquery.nivo.slider.js?ver=####
- awash####.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=####
- s####.####.com/wp-content/plugins/captcha/css/desktop_style.css?ver=####
- f####.####.com/css?family=####&subset=####
- awash####.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=####
- scholar####.com/
- s####.####.com/wp-content/themes/canvas/custom.css
- s####.####.com/wp-content/themes/canvas/functions/css/shortcodes.css
- awash####.com/wp-content/themes/skt-the-app/images/icon-facebook.png
- awash####.com/wp-content/themes/skt-the-app/images/icon-linkdin.png
- you####.com/iframe_api
- awash####.com/wp-content/themes/skt-the-app/css/animation.css?ver=####
- awash####.com/wp-content/themes/skt-the-app/images/icon-twitter.png
- awash####.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=####
- awash####.com/wp-content/themes/skt-the-app/editor-style.css?ver=####
- s####.####.com/wp-content/themes/canvas-child/home-page/bigstock-Mixed-Race-College-Student-Wit-8866807-1.jpg
- s####.####.com/js/300/addthis_widget.js
- f####.####.com/s/opensans/v13/MTP_ySUJH_bn48VBG8sNSo3LH2FgLjViKkqswU-xtII.ttf
- awash####.com/wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=####
- awash####.com/wp-content/plugins/advanced-post-slider/advps-style.css?ver=####
- f####.####.com/s/opensans/v13/DXI1ORHCpsQm3Vp6mXoaTY3LH2FgLjViKkqswU-xtII.ttf
- con####.####.com/js/111441841/sw_connect.js?
- awash####.com/wp-content/plugins/download-attachments/css/frontend.css?ver=####
- s####.####.com/wp-content/themes/canvas-child/style.css?ver=####
- awash####.com/wp-content/themes/skt-the-app/css/responsive.css?ver=####
- awash####.com/wp-content/plugins/woocommerce/assets/js/jquery-cookie/jquery.cookie.min.js?ver=####
- con####.####.net/connect/xd_arbiter/r/1FegrZjPbq3.js?version=####
- awash####.com/wp-content/plugins/advanced-post-slider/images/controls.png
- awash####.com/wp-content/plugins/theme-my-login/theme-my-login.css?ver=####
- s####.####.com/wp-content/themes/canvas/includes/fonts/fontawesome-webfont.ttf?v=####
- awash####.com/wp-content/plugins/advanced-post-slider/images/bx_loader.gif
- awash####.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=####
- f####.####.com/s/opensans/v13/EInbV5DfGHOiMmvb1Xr-ho3LH2FgLjViKkqswU-xtII.ttf
- s####.####.com/yts/jsbin/www-widgetapi-vfldOJ-Ud/www-widgetapi.js
- awash####.com/wp-content/plugins/advanced-post-slider/bxslider/jquery.bxslider.min.js?ver=####
- f####.####.com/s/opensans/v13/MTP_ySUJH_bn48VBG8sNSpS3E-kSBmtLoNJPDtbj2Pk.ttf
- s####.####.com/wp-content/plugins/ithemes-security-pro/core/modules/wordpress-tweaks/js/block-tabnapping.js?ver=####
- awash####.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=####
- l####.####.com/doc-ready?domain=####&product=####&property=####&url=####
- pag####.####.com/pagead/js/adsbygoogle.js
- f####.####.com/s/opensans/v13/u-WUoqrET9fUeobQW7jkRSZ2oysoEQEeKwjgmXLRnTc.ttf
- awash####.com/wp-content/plugins/column-shortcodes/assets/css/shortcodes.css?ver=####
- awash####.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=####
- awash####.com/wp-content/themes/skt-the-app/css/nivo-slider.css?ver=####
- f####.####.com/css?family=####
- s####.####.com/wp-content/plugins/captcha/css/front_end_style.css?ver=####
- awash####.com/wp-content/themes/skt-the-app/images/mobile_nav_right.png
- l####.####.com/pview?event=####&version=####&lang=####&fpc=####&sessionID=####&hostname=####&location=####&product=####&publisher=####&st_optout=####&...
- awash####.com/wp-content/plugins/nextend-facebook-connect/buttons/facebook-btn.css?ver=####
- aw####.com/images/forms/plain/buttons/grey.png
- awash####.com/wp-content/uploads/2017/03/%E1%88%981-600x220.jpg
- awash####.com/wp-content/themes/skt-the-app/style.css?ver=####
- s####.####.com/wp-content/themes/canvas-child/images/black-fade-left.png
- awash####.com/wp-includes/js/wp-emoji-release.min.js?ver=####
- s####.####.com/wp-content/themes/canvas/includes/js/third-party.min.js?ver=####
- m####.####.com/live/boost/ra-57e7a9d3be977ad1/_ate.track.config_resp
- scholar####.com/wp-includes/js/wp-emoji-release.min.js?ver=####
- awash####.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=####
- s####.####.com/wp-content/themes/canvas/includes/js/general.min.js?ver=####
- awash####.com/wp-content/plugins/profile-builder/assets/css/style-front-end.css?ver=####
- con####.####.net/en_US/all.js
- awash####.com/wp-content/uploads/2017/03/0161.jpg
- platfor####.####.com/js/sharethis.js
- platfor####.####.com/pageviews?product=####&property=####&url=####
- pag####.####.com/pagead/js/r20170315/r20170110/show_ads_impl.js
- awash####.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=####
- analy####.####.com/v3/111441841/sw.js
- scholar####.com/wp-content/themes/canvas-child/images/rotate/college-scholarship-student-2.jpg
- awash####.com/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=####
- a####.####.com/cdn-cgi/nexp/dok3v=f2befc48d1/cloudflare.min.js
- scholar####.com/wp-content/themes/canvas-child/images/rotate/rotate.php
- awash####.com/wp-content/uploads/2017/03/solid-blue-wallpaper.jpg
- s####.####.com/wp-includes/js/wp-embed.min.js?ver=####
- s####.####.com/wp-content/plugins/ithemes-security-pro/core/modules/wordpress-tweaks/js/blankshield/blankshield.min.js?ver=####
- s####.####.com/wp-includes/css/dashicons.min.css?ver=####
- awash####.com/wp-content/uploads/2017/03/image-1-600x220.jpg
- awash####.com/wp-content/themes/skt-the-app/images/icon-googleplus.png
HTTP POST requests:
- awash####.com/?ga_action=####
- awash####.com/shop-2/?wc-ajax=####
Modified file system:
Creates the following files:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/f_000019
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/f_000018
- /data/data/####/cache/webviewCacheChromium/f_000017
- /data/data/####/cache/webviewCacheChromium/f_000016
- /data/data/####/files/textingmsgcache
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000014
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000015
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/shared_prefs/TinyDB1.xml
- /data/data/####/shared_prefs/multidex.version.xml
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/f_00001f
- /data/data/####/cache/webviewCacheChromium/f_00001d
- /data/data/####/cache/webviewCacheChromium/f_00001e
- /data/data/####/cache/webviewCacheChromium/f_00001b
- /data/data/####/cache/webviewCacheChromium/f_00001c
- /data/data/####/cache/webviewCacheChromium/f_00001a
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000021
- /data/data/####/cache/webviewCacheChromium/f_000020
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/databases/webview.db-journal
- /data/data/####/shared_prefs/TextingState.xml
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Contains functionality to send SMS messages automatically.
