Technical information
Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- ct####.####.net
- hollywo####.top
- deli####.####.com
- watchmy####.tv
- se####.####.com
- w####.link
- r####.####.com
- c####.####.com
- bull####.top
- a####.####.com
- m####.####.com
- d39iocn####.####.net
- og####.####.info
HTTP GET requests:
- c####.####.com/ak/watchmygirlfriend/videothumbs/19.jpg
- c####.####.com/ak/watchmygirlfriend/join/btn-join.jpg
- c####.####.com/ak/watchmygirlfriend/videothumbs/97n.gif
- c####.####.com/ak/watchmygirlfriend/join/arrow.png
- c####.####.com/ak/watchmygirlfriend/videothumbs/13.jpg
- c####.####.com/ak/watchmygirlfriend/videothumbs/17.jpg
- bull####.top/
- c####.####.com/ak/watchmygirlfriend/videothumbs/20.jpg
- og####.####.info/olkmgnsa.php?islem=####
- c####.####.com/ak/watchmygirlfriend/join/banner-xs.jpg
- c####.####.com/ak/watchmygirlfriend/join/css/bootstrap.min.css
- c####.####.com/ak/watchmygirlfriend/videothumbs/02.jpg
- c####.####.com/ak/watchmygirlfriend/join/style.css
- c####.####.com/ak/watchmygirlfriend/videothumbs/21.jpg
- c####.####.com/ak/watchmygirlfriend/videothumbs/08.jpg
- w####.link/click?c=####&tracker=####&ptrack=####
- se####.####.com/sites/?cat=####&camp=####&categoryid=####&conv=MT####
- c####.####.com/ak/watchmygirlfriend/t2/js/bootstrap.min.js
- c####.####.com/ak/watchmygirlfriend/videothumbs/10.jpg
- d39iocn####.####.net/compliance/epoch_descriptor.html?master_code=####
- w####.link/offer?tracker=####&clickid=####&c=####
- c####.####.com/ak/watchmygirlfriend/videothumbs/22.jpg
- watchmy####.tv/t/?tracker=####&clickid=####&c=####
- c####.####.com/ak/watchmygirlfriend/videothumbs/07.jpg
- w####.link/res/js/validation.js
- c####.####.com/ak/watchmygirlfriend/videothumbs/06.jpg
- c####.####.com/ak/watchmygirlfriend/t2/images/overlay.png
- m####.####.com/tag.php?goal=####
- c####.####.com/ak/watchmygirlfriend/join/js/bootstrap.min.js
- ct####.####.net/ctrack?action=####&type=####&id=####&context=####&cookie...
- c####.####.com/ak/watchmygirlfriend/videothumbs/18.jpg
- c####.####.com/ak/watchmygirlfriend/t2/images/btm-header.jpg
- c####.####.com/ak/watchmygirlfriend/videothumbs/03.jpg
- c####.####.com/ak/watchmygirlfriend/videothumbs/12.gif
- c####.####.com/ak/watchmygirlfriend/videothumbs/thumb-ads.jpg
- c####.####.com/cdn/wmgtv/stylet2.css
- c####.####.com/ak/watchmygirlfriend/t2/images/logo.png
- c####.####.com/ak/watchmygirlfriend/videothumbs/15.jpg
- c####.####.com/ak/watchmygirlfriend/videothumbs/04.jpg
- deli####.####.com/retargeting.php?id=####
- c####.####.com/ak/watchmygirlfriend/videothumbs/100.gif
- a####.####.com/ajax/libs/jquery/1.11.1/jquery.min.js
- c####.####.com/ak/watchmygirlfriend/videothumbs/14.jpg
- w####.link/res/js/checkout.js
- c####.####.com/ak/watchmygirlfriend/videothumbs/01.jpg
- watchmy####.tv/t/js/jquery.lazyload.js
- c####.####.com/ak/watchmygirlfriend/join/banner-sm.jpg
- hollywo####.top/
- r####.####.com/px.gif?akey=####
- c####.####.com/ak/watchmygirlfriend/videothumbs/09.jpg
- og####.####.info/olkmgnsa.php
- c####.####.com/ak/watchmygirlfriend/videothumbs/05.jpg
- c####.####.com/ak/watchmygirlfriend/t2/css/bootstrap.min.css
- c####.####.com/ak/watchmygirlfriend/join/footer-xs.jpg
- c####.####.com/ak/watchmygirlfriend/videothumbs/23.jpg
Modified file system:
Creates the following files:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/databases/TurtlePlayer-journal
- /data/data/####/cache/webviewCacheChromium/f_000018
- /data/data/####/cache/webviewCacheChromium/f_000019
- /data/data/####/cache/webviewCacheChromium/f_000016
- /data/data/####/cache/webviewCacheChromium/f_000017
- /data/data/####/cache/webviewCacheChromium/f_000014
- /data/data/####/cache/webviewCacheChromium/f_000015
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/f_00001f
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00001d
- /data/data/####/cache/webviewCacheChromium/f_00001e
- /data/data/####/cache/webviewCacheChromium/f_00001b
- /data/data/####/cache/webviewCacheChromium/f_00001c
- /data/data/####/cache/webviewCacheChromium/f_00001a
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000025
- /data/data/####/cache/webviewCacheChromium/f_000024
- /data/data/####/cache/webviewCacheChromium/f_000023
- /data/data/####/cache/webviewCacheChromium/f_000022
- /data/data/####/cache/webviewCacheChromium/f_000021
- /data/data/####/cache/webviewCacheChromium/f_000020
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000026
- /data/data/####/databases/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Executes next shell scripts:
- ls -R /storage/emulated/0
Contains functionality to send SMS messages automatically.
