Technical information
Malicious functions:
Sends SMS messages:
- 8844: 404
Network activity:
Connecting to:
- analy####.####.com
- platfor####.####.com
- awash####.com
- f####.####.com
- con####.####.com
- l####.####.com
- you####.com
HTTP GET requests:
- f####.####.com/css?family=####&subset=####
- awash####.com/wp-content/plugins/advanced-post-slider/advps-style.css?ver=####
- awash####.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=####
- awash####.com/wp-content/plugins/theme-my-login/theme-my-login.css?ver=####
- awash####.com/wp-includes/js/wp-emoji-release.min.js?ver=####
- awash####.com/wp-content/plugins/advanced-post-slider/images/controls.png
- awash####.com/wp-content/themes/skt-the-app/css/style_base.css?ver=####
- awash####.com/wp-content/plugins/advanced-post-slider/images/bx_loader.gif
- awash####.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=####
- awash####.com/wp-content/themes/skt-the-app/images/icon-facebook.png
- awash####.com/wp-content/uploads/2017/02/37559589_301-600x220.jpg
- awash####.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=####
- awash####.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=####
- awash####.com/wp-content/themes/skt-the-app/images/icon-linkdin.png
- f####.####.com/s/opensans/v13/EInbV5DfGHOiMmvb1Xr-ho3LH2FgLjViKkqswU-xtII.ttf
- awash####.com/wp-content/plugins/siteorigin-panels/css/front.css?ver=####
- you####.com/iframe_api
- awash####.com/wp-content/themes/skt-the-app/css/animation.css?ver=####
- awash####.com/wp-content/uploads/2017/02/37401644_301-600x220.jpg
- awash####.com/wp-content/plugins/profile-builder/assets/css/style-front-end.css?ver=####
- awash####.com/wp-content/themes/skt-the-app/images/search-icon.png
- analy####.####.com/images/cq_blank.gif?_sw_id=####&_sw_uid=####&_sw_fp=####&_sw_pl=####&_sw_pc=####&_sw_dat####&to=####
- awash####.com/wp-content/uploads/2017/03/0161.jpg
- awash####.com/wp-content/themes/skt-the-app/images/icon-twitter.png
- awash####.com/wp-content/themes/skt-the-app/js/custom.js?ver=####
- f####.####.com/s/opensans/v13/MTP_ySUJH_bn48VBG8sNSo3LH2FgLjViKkqswU-xtII.ttf
- awash####.com/wp-content/plugins/advanced-post-slider/bxslider/jquery.bxslider.min.js?ver=####
- platfor####.####.com/js/sharethis.js
- awash####.com/wp-content/plugins/youtube-embed-plus/scripts/ytprefs.min.js?ver=####
- awash####.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=####
- awash####.com/
- platfor####.####.com/pageviews?product=####&property=####&url=####
- awash####.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=####
- awash####.com/wp-content/themes/skt-the-app/editor-style.css?ver=####
- awash####.com/wp-content/uploads/2017/02/fruit-600x220.jpg
- awash####.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=####
- analy####.####.com/v3/111441841/sw.js
- l####.####.com/doc-ready?domain=####&product=####&property=####&url=####
- you####.com/yts/jsbin/www-widgetapi-vfldOJ-Ud/www-widgetapi.js
- f####.####.com/s/opensans/v13/u-WUoqrET9fUeobQW7jkRSZ2oysoEQEeKwjgmXLRnTc.ttf
- awash####.com/wp-content/plugins/column-shortcodes/assets/css/shortcodes.css?ver=####
- awash####.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=####
- awash####.com/wp-content/plugins/youtube-embed-plus/scripts/fitvids.min.js?ver=####
- awash####.com/wp-content/themes/skt-the-app/css/nivo-slider.css?ver=####
- f####.####.com/css?family=####
- awash####.com/wp-content/plugins/youtube-embed-plus/styles/ytprefs.min.css?ver=####
- awash####.com/wp-content/themes/skt-the-app/images/mobile_nav_right.png
- awash####.com/wp-includes/js/jquery/jquery.js?ver=####
- awash####.com/wp-content/plugins/advanced-post-slider/js/advps.frnt.script.js?ver=####
- awash####.com/wp-content/plugins/download-monitor/assets/css/frontend.css?ver=####
- l####.####.com/pview?event=####&version=####&lang=####&fpc=####&sessionID=####&hostname=####&location=####&product=####&publisher=####&st_optout=####&...
- awash####.com/shop-2/
- awash####.com/wp-content/themes/skt-the-app/js/jquery.nivo.slider.js?ver=####
- con####.####.com/js/111441841/sw_connect.js?
- awash####.com/wp-content/plugins/nextend-facebook-connect/buttons/facebook-btn.css?ver=####
- awash####.com/wp-content/uploads/2017/03/solid-blue-wallpaper.jpg
- awash####.com/wp-content/plugins/download-attachments/css/frontend.css?ver=####
- f####.####.com/s/opensans/v13/DXI1ORHCpsQm3Vp6mXoaTY3LH2FgLjViKkqswU-xtII.ttf
- awash####.com/wp-content/uploads/2017/03/%E1%88%981-600x220.jpg
- f####.####.com/s/opensans/v13/MTP_ySUJH_bn48VBG8sNSpS3E-kSBmtLoNJPDtbj2Pk.ttf
- awash####.com/wp-content/themes/skt-the-app/css/responsive.css?ver=####
- awash####.com/wp-content/plugins/woocommerce/assets/js/jquery-cookie/jquery.cookie.min.js?ver=####
- awash####.com/wp-content/uploads/2017/03/image-1-600x220.jpg
- awash####.com/wp-content/themes/skt-the-app/style.css?ver=####
- awash####.com/wp-content/themes/skt-the-app/images/icon-googleplus.png
HTTP POST requests:
- awash####.com/?wc-ajax=####
- awash####.com/?ga_action=####
- awash####.com/shop-2/?wc-ajax=####
Modified file system:
Creates the following files:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/files/textingmsgcache
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/shared_prefs/multidex.version.xml
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/databases/webview.db-journal
- /data/data/####/shared_prefs/TextingState.xml
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Contains functionality to send SMS messages automatically.
