Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.Siggen.Susp.30839
Network activity:
Connects to:
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) and####.google####.com:443
- TCP(TLS/1.2) and####.google####.com:443
- TCP(TLS/1.2) 2####.58.211.14:443
- TCP(TLS/1.2) 1####.250.74.68:443
DNS requests:
- and####.google####.com
- gmscomp####.google####.com
File system changes:
Creates the following files:
- /data/data/####/MultiDex.lock
- /data/data/####/base.apk.classes1.dex
- /data/data/####/base.apk.classes1.dex.flock (deleted)
- /data/data/####/base.apk.classes1.zip
- /data/data/####/base.apk.classes10.dex
- /data/data/####/base.apk.classes10.dex.flock (deleted)
- /data/data/####/base.apk.classes10.zip
- /data/data/####/base.apk.classes11.dex
- /data/data/####/base.apk.classes11.dex.flock (deleted)
- /data/data/####/base.apk.classes11.zip
- /data/data/####/base.apk.classes12.dex
- /data/data/####/base.apk.classes12.dex.flock (deleted)
- /data/data/####/base.apk.classes12.zip
- /data/data/####/base.apk.classes13.dex
- /data/data/####/base.apk.classes13.dex.flock (deleted)
- /data/data/####/base.apk.classes13.zip
- /data/data/####/base.apk.classes14.dex
- /data/data/####/base.apk.classes14.dex.flock (deleted)
- /data/data/####/base.apk.classes14.zip
- /data/data/####/base.apk.classes15.dex
- /data/data/####/base.apk.classes15.dex.flock (deleted)
- /data/data/####/base.apk.classes15.zip
- /data/data/####/base.apk.classes16.dex
- /data/data/####/base.apk.classes16.dex.flock (deleted)
- /data/data/####/base.apk.classes16.zip
- /data/data/####/base.apk.classes17.dex
- /data/data/####/base.apk.classes17.dex.flock (deleted)
- /data/data/####/base.apk.classes17.zip
- /data/data/####/base.apk.classes18.dex
- /data/data/####/base.apk.classes18.dex.flock (deleted)
- /data/data/####/base.apk.classes18.zip
- /data/data/####/base.apk.classes19.dex
- /data/data/####/base.apk.classes19.dex.flock (deleted)
- /data/data/####/base.apk.classes19.zip
- /data/data/####/base.apk.classes2.dex
- /data/data/####/base.apk.classes2.dex.flock (deleted)
- /data/data/####/base.apk.classes2.zip
- /data/data/####/base.apk.classes20.dex
- /data/data/####/base.apk.classes20.dex.flock (deleted)
- /data/data/####/base.apk.classes20.zip
- /data/data/####/base.apk.classes21.dex
- /data/data/####/base.apk.classes21.dex.flock (deleted)
- /data/data/####/base.apk.classes21.zip
- /data/data/####/base.apk.classes22.dex
- /data/data/####/base.apk.classes22.dex.flock (deleted)
- /data/data/####/base.apk.classes22.zip
- /data/data/####/base.apk.classes23.dex
- /data/data/####/base.apk.classes23.dex.flock (deleted)
- /data/data/####/base.apk.classes23.zip
- /data/data/####/base.apk.classes24.dex
- /data/data/####/base.apk.classes24.dex.flock (deleted)
- /data/data/####/base.apk.classes24.zip
- /data/data/####/base.apk.classes25.dex
- /data/data/####/base.apk.classes25.dex.flock (deleted)
- /data/data/####/base.apk.classes25.zip
- /data/data/####/base.apk.classes26.dex
- /data/data/####/base.apk.classes26.dex.flock (deleted)
- /data/data/####/base.apk.classes26.zip
- /data/data/####/base.apk.classes27.dex
- /data/data/####/base.apk.classes27.dex.flock (deleted)
- /data/data/####/base.apk.classes27.zip
- /data/data/####/base.apk.classes28.zip
- /data/data/####/base.apk.classes3.dex
- /data/data/####/base.apk.classes3.dex.flock (deleted)
- /data/data/####/base.apk.classes3.zip
- /data/data/####/base.apk.classes4.dex
- /data/data/####/base.apk.classes4.dex.flock (deleted)
- /data/data/####/base.apk.classes4.zip
- /data/data/####/base.apk.classes5.dex
- /data/data/####/base.apk.classes5.dex.flock (deleted)
- /data/data/####/base.apk.classes5.zip
- /data/data/####/base.apk.classes6.dex
- /data/data/####/base.apk.classes6.dex.flock (deleted)
- /data/data/####/base.apk.classes6.zip
- /data/data/####/base.apk.classes7.dex
- /data/data/####/base.apk.classes7.dex.flock (deleted)
- /data/data/####/base.apk.classes7.zip
- /data/data/####/base.apk.classes8.dex
- /data/data/####/base.apk.classes8.dex.flock (deleted)
- /data/data/####/base.apk.classes8.zip
- /data/data/####/base.apk.classes9.dex
- /data/data/####/base.apk.classes9.dex.flock (deleted)
- /data/data/####/base.apk.classes9.zip
- /data/data/####/multidex.version.xml
- /data/data/####/temp (deleted)
- /data/data/####/tmp-base.apk.classes1009126390.zip
- /data/data/####/tmp-base.apk.classes1019521868.zip
- /data/data/####/tmp-base.apk.classes1043978892.zip
- /data/data/####/tmp-base.apk.classes1070349616.zip
- /data/data/####/tmp-base.apk.classes1111044320.zip
- /data/data/####/tmp-base.apk.classes1292947639.zip
- /data/data/####/tmp-base.apk.classes1364846766.zip
- /data/data/####/tmp-base.apk.classes1381025113.zip
- /data/data/####/tmp-base.apk.classes1381264587.zip
- /data/data/####/tmp-base.apk.classes1474252238.zip
- /data/data/####/tmp-base.apk.classes1483250091.zip
- /data/data/####/tmp-base.apk.classes1523704750.zip
- /data/data/####/tmp-base.apk.classes1629342915.zip
- /data/data/####/tmp-base.apk.classes1677428335.zip
- /data/data/####/tmp-base.apk.classes1894333983.zip
- /data/data/####/tmp-base.apk.classes1929681782.zip
- /data/data/####/tmp-base.apk.classes1936731836.zip
- /data/data/####/tmp-base.apk.classes1994052514.zip
- /data/data/####/tmp-base.apk.classes2042133927.zip
- /data/data/####/tmp-base.apk.classes29123411.zip
- /data/data/####/tmp-base.apk.classes297846121.zip
- /data/data/####/tmp-base.apk.classes4100080.zip
- /data/data/####/tmp-base.apk.classes410369334.zip
- /data/data/####/tmp-base.apk.classes429689461.zip
- /data/data/####/tmp-base.apk.classes50470475.zip
- /data/data/####/tmp-base.apk.classes606920779.zip
- /data/data/####/tmp-base.apk.classes620831463.zip
- /data/data/####/tmp-base.apk.classes882141406.zip
- /data/data/####/tmp-base.apk.classes922689411.zip
- /data/data/####/tmp-base.apk.classes941121768.zip
Miscellaneous:
Displays its own windows over windows of other apps.
Requests the system alert window permission.
