Technical information
Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- gn####.####.info
- syndica####.####.com
- redtu####.info
- c####.####.com
- p####.####.link
- statist####.com
- int####.pw
HTTP GET requests:
- c####.####.com/landings/51156/1482505631/images/logo.png
- int####.pw/wp-content/uploads/2017/04/black-tranny-240x180.jpg
- p####.####.link/c/da57dc555e50572d?s1=####&s2=####&s3=####&click_id=####
- c####.####.com/landings/51156/1482505631/images/img2.jpg
- c####.####.com/landings/51156/1482505631/images/img7.jpg
- c####.####.com/landings/58300/1492784968/images/cancel.png
- int####.pw/wp-content/uploads/2017/04/the-blowjob-mistress-240x180.jpg
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_6.gif
- int####.pw/wp-content/uploads/2017/04/pussy-masturbation-of-exotic-girl-...
- c####.####.com/landings/51156/1482505631/css/a9675f00b3b6659e65519b22c77...
- c####.####.com/landings/58300/1492784968/images/body_1.jpg
- int####.pw/wp-content/uploads/2017/04/young-couple-and-their-first-photo...
- c####.####.com/landings/51156/1482505631/images/img8.jpg
- c####.####.com/landings/58300/1492784968/images/loading_bar.gif
- c####.####.com/landings/58300/1492784968/js/avsc2.js?149278####
- gn####.####.info/olkmgnsa.php
- int####.pw/wp-content/uploads/2017/04/latinfixation-cutie-carla-swank-su...
- int####.pw/wp-content/uploads/2017/04/2-girls-x-1-man-the-best-funk-240x...
- syndica####.####.com/splash.php?cat=####&idzone=####&type=####&p=####&su...
- int####.pw/wp-content/uploads/2017/04/black-babes-ass-covered-in-white-c...
- int####.pw/wp-content/uploads/2017/04/bitchy-chainsmoker-strong-cigarett...
- c####.####.com/landings/58300/1492784968/images/age_2.jpg
- int####.pw/wp-content/uploads/2017/04/drunk-girls-sucking-the-cocks-240x...
- int####.pw/wp-content/uploads/2017/04/euro-babe-tiana-fucked-and-gets-fa...
- int####.pw/wp-content/uploads/2017/04/latinfixation-cute-nerdy-teen-apri...
- c####.####.com/landings/51156/1482505631/images/img9.jpg
- int####.pw/wp-content/uploads/2017/04/gorgeous-bollywood-babe-dances-240...
- int####.pw/wp-content/uploads/2017/04/jessica-masturbation-240x180.jpg
- int####.pw/wp-content/uploads/2017/04/blonde-loves-her-big-vibrator-240x...
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_2.gif
- int####.pw/wp-content/uploads/2017/04/ashley-fires-orders-you-to-lick-he...
- c####.####.com/landings/58300/1492784968/css/1bccb5a6116838231b3333b28e3...
- int####.pw/wp-content/uploads/2017/04/cock-hungry-college-girls-240x180....
- int####.pw/wp-content/uploads/2017/04/INTPORNLOGO.png
- int####.pw/wp-content/uploads/2017/04/no-im-gay-240x180.jpg
- int####.pw/wp-content/themes/flat_tube/js/jquery.min.js
- int####.pw/wp-content/uploads/2017/04/hot-young-college-girls-can-240x18...
- int####.pw/wp-content/uploads/2017/04/quick-jerk-240x180.jpg
- c####.####.com/landings/58300/1492784968/images/relation_1.jpg
- int####.pw/wp-content/uploads/2017/04/amateur-muse-toying-her-pussy-240x...
- int####.pw/wp-content/uploads/2017/04/blonde-with-big-butt-in-amazing-sc...
- p####.####.link/c/679efeecdc3b4d07?&ijykJHsadL5=####&click_id=####&s1=##...
- c####.####.com/landings/58300/1492784968/images/relation_2.jpg
- int####.pw/wp-content/themes/flat_tube/includes/font-awesome/css/font-aw...
- statist####.com/adv_pxl?pid=####&id=####
- int####.pw/wp-content/uploads/2017/04/paki-muslim-girl-sucks-off-a-small...
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_3.gif
- c####.####.com/landings/58300/1492784968/images/body_2.jpg
- c####.####.com/landings/58300/1492784968/images/ok.png
- int####.pw/wp-content/uploads/2017/04/ash-hollywood-gives-a-footjob-with...
- c####.####.com/landings/19326/css/a9675f00b3b6659e65519b22c776ba50.css?1...
- c####.####.com/landings/51156/1482505631/images/img10.jpg
- int####.pw/wp-content/uploads/2017/04/huge-12-inch-big-black-dravidian-d...
- int####.pw/wp-content/themes/flat_tube/js/mobile.js?v=####
- int####.pw/wp-content/uploads/2017/04/aurora-jolie-aka-nikara-drum-n-bas...
- int####.pw/wp-content/uploads/2017/04/blonde-testing-her-new-toy-240x180...
- int####.pw/wp-content/uploads/2017/04/wank-slo-mo-240x180.jpg
- int####.pw/wp-content/uploads/2017/04/lovely-blondes-havingsex-deep-anal...
- int####.pw/wp-content/uploads/2017/04/bare-brazilian-games-sc-2-240x180....
- c####.####.com/landings/58300/1492784968/images/main_girl.jpg
- int####.pw/wp-content/uploads/2017/04/masturbation-rescue-240x180.jpg
- redtu####.info/
- c####.####.com/landings/51156/1482505631/images/img5.jpg
- c####.####.com/landings/51156/1482505631/images/img4.jpg
- p####.####.link/c/da57dc555e50572d?s1=####&s2=####&s3=####&click_i####
- int####.pw/wp-content/uploads/2017/04/femaleagent-hot-sexual-chemistry-d...
- gn####.####.info/olkmgnsa.php?islem=####
- c####.####.com/landings/58300/1492784968/images/age_1.jpg
- c####.####.com/landings/51156/1482505631/images/img3.jpg
- int####.pw/wp-content/uploads/2017/04/hot-blonde-fingering-hole-on-couch...
- c####.####.com/landings/51156/1482505631/images/img12.jpg
- int####.pw/wp-includes/js/wp-embed.min.js?ver=####
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_5.gif
- int####.pw/wp-content/uploads/2017/04/brazilian-gangbang-orgy-with-some-...
- int####.pw/wp-content/uploads/2017/04/slutty-goth-in-ripped-fishnets-mas...
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_1.gif
- int####.pw/wp-content/uploads/2017/04/horny-black-slut-sucks-two-big-whi...
- c####.####.com/landings/51156/1482505631/images/bg.jpg
- int####.pw/wp-content/uploads/2017/04/horny-drunk-girls-240x180.jpg
- int####.pw/
- int####.pw/wp-content/themes/flat_tube/style.css?v=####
- int####.pw/wp-content/uploads/2017/04/lovely-big-paki-womans-muslim-arse...
- int####.pw/wp-content/uploads/2017/04/latinfixation-asian-latina-mix-ang...
- int####.pw/wp-content/uploads/2017/04/cum-on-her-body-pov-240x180.jpg
- int####.pw/wp-includes/js/wp-emoji-release.min.js?ver=####
- c####.####.com/landings/58300/1492784968/js/b040f9f4da7e868eabeee13dfd48...
- c####.####.com/landings/51156/1482505631/images/img11.jpg
- c####.####.com/landings/51156/1482505631/images/img1.jpg
- c####.####.com/landings/19326/js/6a26daa78732c4dbeed9eabcc4d1bd0b.js?146...
- c####.####.com/landings/51156/1482505631/images/img6.jpg
- int####.pw/wp-content/uploads/2017/04/missionary-orgy-in-casting-clip-24...
- c####.####.com/landings/51156/1482505631/js/avsc2.js?148250####
- c####.####.com/landings/58300/1492784968/images/jump_nl_mol_4.gif
- c####.####.com/landings/51156/1482505631/js/6a26daa78732c4dbeed9eabcc4d1...
Modified file system:
Creates the following files:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/databases/TurtlePlayer-journal
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/databases/webviewCookiesChromiumPrivate.db-journal
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Executes next shell scripts:
- ls -R /storage/emulated/0
Contains functionality to send SMS messages automatically.
