Technical information
Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) cou####.y####.ru:80
- TCP(HTTP/1.1) b####.android####.info:80
DNS requests:
- avtosh####.org
- b####.android####.info
- cou####.y####.ru
HTTP GET requests:
- b####.android####.info/
- b####.android####.info/wp-content/plugins/wp-random-post-inside//css/sty...
- b####.android####.info/wp-content/themes/azart/assets/bootstrap/css/boot...
- b####.android####.info/wp-content/themes/azart/assets/bootstrap/js/boots...
- b####.android####.info/wp-content/themes/azart/assets/css/component.css?...
- b####.android####.info/wp-content/themes/azart/assets/css/custom.css?ver...
- b####.android####.info/wp-content/themes/azart/assets/css/main.css?ver=#...
- b####.android####.info/wp-content/themes/azart/assets/css/responsive.css...
- b####.android####.info/wp-content/themes/azart/assets/css/style.css?ver=...
- b####.android####.info/wp-content/themes/azart/assets/fonts/MontserratRe...
- b####.android####.info/wp-content/themes/azart/assets/fonts/OpenSansRegu...
- b####.android####.info/wp-content/themes/azart/assets/icons/font-awesome...
- b####.android####.info/wp-content/themes/azart/assets/js/custom.js?ver=#...
- b####.android####.info/wp-content/themes/azart/assets/js/jquery.inview.m...
- b####.android####.info/wp-content/themes/azart/assets/js/jquery.isotope....
- b####.android####.info/wp-content/themes/azart/assets/js/jquery.matchHei...
- b####.android####.info/wp-content/themes/azart/assets/js/jquery.mousewhe...
- b####.android####.info/wp-content/themes/azart/assets/js/jquery.slicknav...
- b####.android####.info/wp-content/themes/azart/assets/js/smoothscroll.js...
- b####.android####.info/wp-content/themes/azart/inc/plugins/kirki/assets/...
- b####.android####.info/wp-content/themes/azart/style.css?ver=####
- b####.android####.info/wp-content/uploads/2018/01/muscogee-casino-design...
- b####.android####.info/wp-content/uploads/2018/01/vulcan-300x300.jpg
- b####.android####.info/wp-includes/css/dashicons.min.css?ver=####
- b####.android####.info/wp-includes/js/jquery/jquery-migrate.min.js?ver=#...
- b####.android####.info/wp-includes/js/jquery/jquery.js?ver=####
- b####.android####.info/wp-includes/js/wp-embed.min.js?ver=####
- b####.android####.info/wp-includes/js/wp-emoji-release.min.js?ver=####
- cou####.y####.ru/hit?q;t52.6####
- cou####.y####.ru/hit?t52.6;r####
Modified file system:
Creates the following files:
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/f_000001
- <Package Folder>/cache/####/f_000002
- <Package Folder>/cache/####/f_000003
- <Package Folder>/cache/####/f_000004
- <Package Folder>/cache/####/f_000005
- <Package Folder>/cache/####/f_000006
- <Package Folder>/cache/####/f_000007
- <Package Folder>/cache/####/f_000008
- <Package Folder>/cache/####/f_000009
- <Package Folder>/cache/####/index
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal
Miscellaneous:
Displays its own windows over windows of other applications.
