Android.Siggen.Susp.22208

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Siggen.Susp.22203

Network activity:

Connects to:

UDP(DNS) <Google DNS>
UDP(DNS) 8####.8.4.4:53
TCP(HTTP/1.0) v.su####.com:80
TCP(HTTP/1.1) v.su####.com:80
TCP(HTTP/1.1) 1####.128.85.140:80
TCP(HTTP/1.1) brs.sendc####.xyz:80
TCP(TLS/1.0) p####.google####.com:443
TCP(TLS/1.0) www.google####.com:443
TCP(TLS/1.0) 74.1####.205.94:443
TCP(TLS/1.0) th.b####.com.####.net:443
TCP(TLS/1.0) ak.private####.msiden####.com:443
TCP(TLS/1.0) s####.dual####.s-part-####.####.net:443
TCP(TLS/1.0) v.cla####.ms:443
TCP(TLS/1.0) www-bin####.dual-a-####.a-ms####.net:443
TCP(TLS/1.2) www.google####.com:443
TCP(TLS/1.2) 74.1####.205.94:443
TCP(TLS/1.2) 1####.177.14.104:443
UDP 64.2####.161.102:443

DNS requests:

brs.sendc####.xyz
c.cla####.ms
l####.l####.com
l####.microso####.com
p####.google####.com
p.cli####.net
th.b####.com
v.cla####.ms
v.su####.com
w####.b####.com
www.b####.com
www.cla####.ms
www.google####.com

HTTP GET requests:

brs.sendc####.xyz/browser/cb//adblock.php
brs.sendc####.xyz/browser/cb//adjs.php
brs.sendc####.xyz/browser/cb//adkill.php
brs.sendc####.xyz/browser/cb/homeinfo.php?&udid=####&os=####&osv=####&dt...

HTTP POST requests:

v.su####.com/gst.php
v.su####.com/sal.php
v.su####.com/u.php?id=####&m=####&s=####&p=####&aid=####&am=####
v.su####.com/v4.php
v.su####.com/vereport.php

File system changes:

Creates the following files:

/data/data/####/.backup_5.log
/data/data/####/.backup_7.dex
/data/data/####/.backup_7.dex.flock (deleted)
/data/data/####/.backup_7.jar
/data/data/####/0094c44c686f9698_0
/data/data/####/00fae7c0eb838503_0
/data/data/####/012e26d5f9a237fc_0
/data/data/####/01603fd2d5b481b1_0
/data/data/####/016dcb8b7ac1bcae_0
/data/data/####/019d22a32ba0cf57_0
/data/data/####/039bf159ca7a6bcb_0
/data/data/####/0410dce9f3bc4120_0
/data/data/####/04f26124ebe7bb31_0
/data/data/####/04f26124ebe7bb31_1
/data/data/####/050c66491cf9de9d_0
/data/data/####/051315923c04166e_0
/data/data/####/051315923c04166e_1
/data/data/####/054a6d001db9f912_0
/data/data/####/078c5e4b966a9c2d_0
/data/data/####/07c9f97f940ea731_0
/data/data/####/07e07cd8e71a0549_0
/data/data/####/08be23c7f30199aa_0
/data/data/####/09e04a3c979509ad_0
/data/data/####/0a2261e14ddd6b38_0
/data/data/####/0a279d268feb291d_0
/data/data/####/0c3f4653b355549a_0
/data/data/####/0cb16d7455e9376a_0
/data/data/####/0f0a8c8ac03bc899_0
/data/data/####/0f5c7bd92995a62c_0
/data/data/####/0fddc6cd0872f958_0
/data/data/####/10c41fc63fc23439_0
/data/data/####/1284b3df40a346b5_0
/data/data/####/13c36fd7bcd44ee7_0
/data/data/####/1407905432e55eab_0
/data/data/####/1453d9e7530ec2f1_0
/data/data/####/160362a8d003cb58_0
/data/data/####/172335dd35392917_0
/data/data/####/1744ee5c6fdd3ca4_0
/data/data/####/17bd417edb6cfdf6_0
/data/data/####/17bd42b8357a2646_0
/data/data/####/1996402cfa3eedc7_0
/data/data/####/1996402cfa3eedc7_1
/data/data/####/1ab03b89df2f85ec_0
/data/data/####/1af26ca21b35854f_0
/data/data/####/1afefdc8b4a14583_0
/data/data/####/1b1bec921957a868_0
/data/data/####/1b8a4418e36d93c0_0
/data/data/####/1c436b40cde8850d_0
/data/data/####/1d1af97c914d3219_0
/data/data/####/1dbc491cf7581212_0
/data/data/####/1fb7b96612d6a116_0
/data/data/####/1fb7b96612d6a116_1
/data/data/####/20f2ae30f33cc9be_0
/data/data/####/2252cac84b51b004_0
/data/data/####/22eaad8350fb072d_0
/data/data/####/23a4bb739fff0937_0
/data/data/####/23d1ec2d9146c2db_0
/data/data/####/2456a6889651648a_0
/data/data/####/2456a6889651648a_1
/data/data/####/250fd03439127635_0
/data/data/####/2532615478a5a88f_0
/data/data/####/25a31eeb43a29636_0
/data/data/####/25a31eeb43a29636_1
/data/data/####/26885aa01aed8d02_0
/data/data/####/26a045702feaf29d_0
/data/data/####/26be99eb23bc6640_0
/data/data/####/26be99eb23bc6640_1
/data/data/####/279fd482b848cc29_0
/data/data/####/282532e727ce1a7b_0
/data/data/####/2884a470cdf3ba60_0
/data/data/####/2990af2758621f26_0
/data/data/####/2990af2758621f26_1
/data/data/####/29d4a7555b769a3d_0
/data/data/####/29eac535cceb0558_0
/data/data/####/2ac04359d52a390d_0
/data/data/####/2b0558cf9071e797_0
/data/data/####/2bfab717ace815cf_0
/data/data/####/2cbe8b139dde729c_0
/data/data/####/2f284e1074845e88_0
/data/data/####/2fe6cba18f4362d2_0
/data/data/####/2fe6cba18f4362d2_1
/data/data/####/3021f35896f350c9_0
/data/data/####/3045064919ba0d3d_0
/data/data/####/31c9ea4399cc5be7_0
/data/data/####/32cbe282e363171c_0
/data/data/####/336dd15f7012407f_0
/data/data/####/336f1841492d51c.xml
/data/data/####/33b0356340ad7f8d_0
/data/data/####/3522208322f82202_0
/data/data/####/368887a8e56af206_0
/data/data/####/36cf4fcc8e8e3b15_0
/data/data/####/36f1d0eceb40bf04_0
/data/data/####/36f1d0eceb40bf04_0 (deleted)
/data/data/####/39fa59f5f9249b35_0
/data/data/####/3ae8304d762ef988_0
/data/data/####/3c63df3c80bcb992_0
/data/data/####/3c83faf799be9a78_0
/data/data/####/3e1c3365475fdf59_0
/data/data/####/3e1c3365475fdf59_1
/data/data/####/401ee860c5a85555_0
/data/data/####/423eb5115819bd11_0
/data/data/####/429b033a0d967c96_0
/data/data/####/429b033a0d967c96_1
/data/data/####/44c7b679742d6ae5_0
/data/data/####/456644b4cb8ffd1d_0
/data/data/####/45afb9d0f10b4201_0 (deleted)
/data/data/####/467461b6334deb71_0
/data/data/####/4749a9d17548d443_0
/data/data/####/47548e7b01e4a3d2_0
/data/data/####/4bf61e8aa9e62576_0
/data/data/####/4bfd877f99406135_0
/data/data/####/4e1046ce473eb931_0
/data/data/####/4e458acba23f83b2_0
/data/data/####/4ef4e0376eff3d0f_0
/data/data/####/527b5d498d1f772e_0
/data/data/####/54483e8abff92574_0
/data/data/####/569efdc0b09cf9c4_0 (deleted)
/data/data/####/56c1ed9690f98092_0
/data/data/####/5806ca043845738f_0
/data/data/####/5860d946ac5581bc_0 (deleted)
/data/data/####/58c71f8f1a6c9d3f_0
/data/data/####/593bdca66cb7b99b_0
/data/data/####/5999975996a84a9c_0
/data/data/####/5cf3d78573a32985_0
/data/data/####/5d8d65b7d3ee80ee_0
/data/data/####/5ebd541371d65e28_0
/data/data/####/5f956de9ba9157cd_0
/data/data/####/62074aa5f2a905c2_0
/data/data/####/62074aa5f2a905c2_1
/data/data/####/62fd42d941596686_0
/data/data/####/62fd42d941596686_1
/data/data/####/632775593da04e80_0
/data/data/####/63c4ae551de2efdb_0
/data/data/####/64ad7d263de7aebc_0
/data/data/####/65018d0af1e9c6b9_0
/data/data/####/65018d0af1e9c6b9_1
/data/data/####/6637aa094206063d_0
/data/data/####/66ea7b70b505f2d0_0
/data/data/####/6749a3ea44f54ecf_0
/data/data/####/68d672d62e26aaee_0
/data/data/####/693780125e3c8f81_0
/data/data/####/69b8584b8c7f590f_0
/data/data/####/6ae0a4ef2efb80db_0
/data/data/####/6bc3aee77ba2f95b_0
/data/data/####/6f2191d1da75dd3c_0
/data/data/####/72c7f5567e823510_0
/data/data/####/76ff40583edb1df7_0
/data/data/####/77176af28390508b_0
/data/data/####/7779691090be7053_0
/data/data/####/77ad9d09f5ec32fb_0
/data/data/####/7b2f77c85bda6f25_0
/data/data/####/7d1a4d2d28048a9f_0
/data/data/####/7d730a9eb433f324_0 (deleted)
/data/data/####/7da27fb6ea040faa_0
/data/data/####/7dd4760015693ee9_0
/data/data/####/7e10caef1243eb5c_0
/data/data/####/7e255c0ad025bedf_0
/data/data/####/80ca86b4bf2e28cd_0
/data/data/####/81a9088746f7a4e9_0
/data/data/####/81a9088746f7a4e9_1
/data/data/####/82055e680704a705_0
/data/data/####/84c4e7eb2de87e70_0
/data/data/####/84e340423d0faa05_0
/data/data/####/84e340423d0faa05_1
/data/data/####/862ed72bf96f0756_0
/data/data/####/86bd459cd7f9f92c_0
/data/data/####/86bd459cd7f9f92c_1
/data/data/####/886ea8952a40ce47_0
/data/data/####/889f25339c2a35c9_0
/data/data/####/889f25339c2a35c9_1
/data/data/####/88c370bf3eab9771_0
/data/data/####/88c370bf3eab9771_1
/data/data/####/890a15f2cea3f9b7_0
/data/data/####/8bf9c264371ef7c1_0
/data/data/####/8c8b4c3aa4a519d3_0
/data/data/####/8ce026172aafb3ab_0
/data/data/####/8ce026172aafb3ab_1
/data/data/####/8d95225b573d2203_0
/data/data/####/905ba1f4b8de1969_0
/data/data/####/905ba1f4b8de1969_1
/data/data/####/90b740d3a9d949bb_0
/data/data/####/910b0b823132fa13_0 (deleted)
/data/data/####/91992648cba2e6a8_0
/data/data/####/925e9063965af749_0
/data/data/####/925e9063965af749_1
/data/data/####/9367c015a05f86cf_0
/data/data/####/939bc14985769d9c_0
/data/data/####/94f3f29cada61621_0
/data/data/####/9547d8a006c0b4eb_0
/data/data/####/95999ad4464f7385_0
/data/data/####/9600d51b416fe5be_0
/data/data/####/985316c7e4832589_0
/data/data/####/985316c7e4832589_1
/data/data/####/98b95c79c3b590d1_0
/data/data/####/99c025df9243777c_0
/data/data/####/99cba5a2580c8f42_0
/data/data/####/9a193417cdd8895e_0
/data/data/####/9a249ab525e65c69_0
/data/data/####/9ba9e7b6a5f151e9_0
/data/data/####/9cca6695d2ccc49d_0
/data/data/####/9ebb59efa7a6ec58_0
/data/data/####/9ff0111a0600ab49_0
/data/data/####/9ff0111a0600ab49_1
/data/data/####/Cookies-journal
/data/data/####/Ninja3.db
/data/data/####/Ninja3.db-journal
/data/data/####/WebViewChromiumPrefs.xml
/data/data/####/a017e3648589cdf2_0
/data/data/####/a16b6d504eb9d417_0
/data/data/####/a1f60d93bad31cf0_0
/data/data/####/a2146e101ba3e977_0
/data/data/####/a3cd29cc34942318_0
/data/data/####/a4060e59cd1beebb_0
/data/data/####/a4bfc77ceea41459_0
/data/data/####/a4e9953fe0ea2ea8_0
/data/data/####/a5779f93c9baddc3_0
/data/data/####/a9ec498d0f7df381_0
/data/data/####/aa0e4ecc4dc0ef0c_0
/data/data/####/ad5aa2655e7cb6de_0
/data/data/####/ad9e4324ed8beca8_0
/data/data/####/adblock.txt
/data/data/####/adblock.xml
/data/data/####/ade4c76f4976c37a_0
/data/data/####/adjs.txt
/data/data/####/adkill.txt
/data/data/####/b04b71fafff9d7f1_0
/data/data/####/b17dcaaae693af66_0
/data/data/####/b2a2234bb1dfc74f_0
/data/data/####/b2ae545b3bde4009_0
/data/data/####/b586ebafdec9907b_0
/data/data/####/b5d60059ea38680d_0
/data/data/####/b7e37f7910c70668_0
/data/data/####/b7e37f7910c70668_1
/data/data/####/b81e5745e2df7ee1_0 (deleted)
/data/data/####/bbb6a75e6f077aa4_0
/data/data/####/bd601a7278e28e95_0
/data/data/####/bd6700a5fd115114_0
/data/data/####/be75748e086376fd_0
/data/data/####/browserxml.xml
/data/data/####/c0ffdbbc5dbfbc78_0
/data/data/####/c18337ac546d99d5_0
/data/data/####/c2d1aa5ee4031681_0
/data/data/####/c2d1aa5ee4031681_1
/data/data/####/c458d6d0a444a6a9_0
/data/data/####/c458d6d0a444a6a9_1
/data/data/####/c48caed3d68829e7_0
/data/data/####/c5363c14db6c8622_0
/data/data/####/c5363c14db6c8622_1
/data/data/####/c57e6917d666c0d5_0
/data/data/####/c59c1e65ee4faaa5_0
/data/data/####/c5a122046f5dae15_0
/data/data/####/c74321ddc01c8b47_0
/data/data/####/c8a7fc93dfcea77e_0
/data/data/####/c8b079c3ea5d1dd3_0
/data/data/####/c8bca1c39661b85d_0
/data/data/####/c8e18a81a4d042b8_0
/data/data/####/c90a344da4676357_0
/data/data/####/cc1e9839e46e1946_0
/data/data/####/cd36ccc6dd371b49_0
/data/data/####/cf82b1962111ca26_0
/data/data/####/com.fast.lite.browser_preferences.xml
/data/data/####/d028f11642ca0ff9_0
/data/data/####/d1073350cd94e10d_0
/data/data/####/d1073350cd94e10d_1
/data/data/####/d1bcc0b951f85700_0
/data/data/####/d510241543326f85_0
/data/data/####/d7502cb2fe2e75ed_0
/data/data/####/d7502cb2fe2e75ed_1
/data/data/####/d8e0215fd932c2b0_0
/data/data/####/d9a649c78f83338c_0
/data/data/####/da275f8b4b3714f4_0
/data/data/####/da6b62b4b2900d09_0
/data/data/####/da6b62b4b2900d09_1
/data/data/####/daf36b4d7a66f558_0
/data/data/####/daf36b4d7a66f558_1
/data/data/####/dbc5c700903d54e7_0
/data/data/####/dbc5c700903d54e7_1
/data/data/####/dc82e7f073fe3146_0 (deleted)
/data/data/####/dcbfe804cc4597df_0
/data/data/####/dcbfe804cc4597df_1
/data/data/####/dd40e231d2f1c383_0
/data/data/####/dd94ea50128bad1f_0
/data/data/####/de5d4e9a2305d2dc_0
/data/data/####/df0a650f744f4b18_0
/data/data/####/e00150584afbafcb_0
/data/data/####/e0d6bb8090826811_0
/data/data/####/e278fef8641ef52c_0
/data/data/####/e5d9b13e622f1041_0
/data/data/####/e76410e3239184b2_0
/data/data/####/e76410e3239184b2_1
/data/data/####/e7d0f1467929b07d_0
/data/data/####/e80b1348c5c83784_0
/data/data/####/e9723312d98bf866_0
/data/data/####/ea32959a949ee3db_0
/data/data/####/ebb4b889b9b0dcfa_0
/data/data/####/ec1e4a841b51a20e_0
/data/data/####/ed351a7c1890ac62_0
/data/data/####/edfaa1962d325504_0
/data/data/####/f11ad49a4552790a_0
/data/data/####/f1b1fb2f9f3d49ec_0
/data/data/####/f3d78efa0564b035_0
/data/data/####/f43f08a80a0d6049_0
/data/data/####/f50c57f5c5e7faf9_0
/data/data/####/f63969090df3cf1a_0
/data/data/####/f77df7433504a8b1_0
/data/data/####/f8c8bcb0e2c94d74_0
/data/data/####/f94a1a35e13a7459_0
/data/data/####/fb4aff0f8d3e5f8b_0
/data/data/####/fc7311340ba0bd6b_0
/data/data/####/index
/data/data/####/last_paused_PREF.xml
/data/data/####/last_paused_PREF.xml.bak
/data/data/####/link.db
/data/data/####/link.db-journal
/data/data/####/metrics_guid
/data/data/####/the-real-index
/data/misc/####/primary.prof

Miscellaneous:

Uses the following algorithms to encrypt data:

AES
AES-CBC-NoPadding

Uses the following algorithms to decrypt data:

AES
AES-CBC-NoPadding

Gets information about network.

Gets information about phone status (number, IMEI, etc.).

Gets information about installed apps.

Displays its own windows over windows of other apps.

Requests the system alert window permission.

Технологии

Термины

Обучение и просвещение

Мифы

Technical information

Рекомендации по лечению

Демо бесплатно на 14 дней