Android.BankBot.MoqHao.90

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.BankBot.MoqHao.1.origin

Network activity:

Connects to:

TCP(???) 1####.0.10.254:37434
UDP(DNS) <Google DNS>
TCP(HTTP/1.1) 1####.144.149.130:12380
TCP(TLS/1.0) m.v####.com:443

DNS requests:

m.v####.com

HTTP GET requests:

1####.144.149.130:12380/hello?id=####

File system changes:

Creates the following files:

/data/data/####/$ic_launcher_foreground__0.xml
/data/data/####/AndroidManifest.xml
/data/data/####/abc_ab_share_pack_mtrl_alpha.9.png
/data/data/####/abc_action_bar_item_background_material.xml
/data/data/####/abc_action_bar_title_item.xml
/data/data/####/abc_action_bar_up_container.xml
/data/data/####/abc_action_menu_item_layout.xml
/data/data/####/abc_action_menu_layout.xml
/data/data/####/abc_action_mode_bar.xml
/data/data/####/abc_action_mode_close_item_material.xml
/data/data/####/abc_activity_chooser_view.xml
/data/data/####/abc_activity_chooser_view_list_item.xml
/data/data/####/abc_alert_dialog_button_bar_material.xml
/data/data/####/abc_alert_dialog_material.xml
/data/data/####/abc_alert_dialog_title_material.xml
/data/data/####/abc_background_cache_hint_selector_material_dark.xml
/data/data/####/abc_background_cache_hint_selector_material_light.xml
/data/data/####/abc_btn_borderless_material.xml
/data/data/####/abc_btn_check_material.xml
/data/data/####/abc_btn_check_material_anim.xml
/data/data/####/abc_btn_check_to_on_mtrl_000.png
/data/data/####/abc_btn_check_to_on_mtrl_015.png
/data/data/####/abc_btn_colored_borderless_text_material.xml
/data/data/####/abc_btn_colored_material.xml
/data/data/####/abc_btn_colored_text_material.xml
/data/data/####/abc_btn_default_mtrl_shape.xml
/data/data/####/abc_btn_radio_material.xml
/data/data/####/abc_btn_radio_material_anim.xml
/data/data/####/abc_btn_radio_to_on_mtrl_000.png
/data/data/####/abc_btn_radio_to_on_mtrl_015.png
/data/data/####/abc_btn_switch_to_on_mtrl_00001.9.png
/data/data/####/abc_btn_switch_to_on_mtrl_00012.9.png
/data/data/####/abc_cab_background_internal_bg.xml
/data/data/####/abc_cab_background_top_material.xml
/data/data/####/abc_cab_background_top_mtrl_alpha.9.png
/data/data/####/abc_cascading_menu_item_layout.xml
/data/data/####/abc_color_highlight_material.xml
/data/data/####/abc_control_background_material.xml
/data/data/####/abc_dialog_material_background.xml
/data/data/####/abc_dialog_title_material.xml
/data/data/####/abc_edit_text_material.xml
/data/data/####/abc_expanded_menu_layout.xml
/data/data/####/abc_fade_in.xml
/data/data/####/abc_fade_out.xml
/data/data/####/abc_grow_fade_in_from_bottom.xml
/data/data/####/abc_hint_foreground_material_dark.xml
/data/data/####/abc_hint_foreground_material_light.xml
/data/data/####/abc_ic_ab_back_material.xml
/data/data/####/abc_ic_arrow_drop_right_black_24dp.xml
/data/data/####/abc_ic_clear_material.xml
/data/data/####/abc_ic_commit_search_api_mtrl_alpha.png
/data/data/####/abc_ic_go_search_api_material.xml
/data/data/####/abc_ic_menu_copy_mtrl_am_alpha.xml
/data/data/####/abc_ic_menu_cut_mtrl_alpha.xml
/data/data/####/abc_ic_menu_overflow_material.xml
/data/data/####/abc_ic_menu_paste_mtrl_am_alpha.xml
/data/data/####/abc_ic_menu_selectall_mtrl_alpha.xml
/data/data/####/abc_ic_menu_share_mtrl_alpha.xml
/data/data/####/abc_ic_search_api_material.xml
/data/data/####/abc_ic_voice_search_api_material.xml
/data/data/####/abc_item_background_holo_dark.xml
/data/data/####/abc_item_background_holo_light.xml
/data/data/####/abc_list_divider_material.xml
/data/data/####/abc_list_divider_mtrl_alpha.9.png
/data/data/####/abc_list_focused_holo.9.png
/data/data/####/abc_list_longpressed_holo.9.png
/data/data/####/abc_list_menu_item_checkbox.xml
/data/data/####/abc_list_menu_item_icon.xml
/data/data/####/abc_list_menu_item_layout.xml
/data/data/####/abc_list_menu_item_radio.xml
/data/data/####/abc_list_pressed_holo_dark.9.png
/data/data/####/abc_list_pressed_holo_light.9.png
/data/data/####/abc_list_selector_background_transition_holo_dark.xml
/data/data/####/abc_list_selector_background_transition_holo_light.xml
/data/data/####/abc_list_selector_disabled_holo_dark.9.png
/data/data/####/abc_list_selector_disabled_holo_light.9.png
/data/data/####/abc_list_selector_holo_dark.xml
/data/data/####/abc_list_selector_holo_light.xml
/data/data/####/abc_menu_hardkey_panel_mtrl_mult.9.png
/data/data/####/abc_popup_background_mtrl_mult.9.png
/data/data/####/abc_popup_enter.xml
/data/data/####/abc_popup_exit.xml
/data/data/####/abc_popup_menu_header_item_layout.xml
/data/data/####/abc_popup_menu_item_layout.xml
/data/data/####/abc_primary_text_disable_only_material_dark.xml
/data/data/####/abc_primary_text_disable_only_material_light.xml
/data/data/####/abc_primary_text_material_dark.xml
/data/data/####/abc_primary_text_material_light.xml
/data/data/####/abc_ratingbar_indicator_material.xml
/data/data/####/abc_ratingbar_material.xml
/data/data/####/abc_ratingbar_small_material.xml
/data/data/####/abc_screen_content_include.xml
/data/data/####/abc_screen_simple.xml
/data/data/####/abc_screen_simple_overlay_action_mode.xml
/data/data/####/abc_screen_toolbar.xml
/data/data/####/abc_scrubber_control_off_mtrl_alpha.png
/data/data/####/abc_scrubber_control_to_pressed_mtrl_000.png
/data/data/####/abc_scrubber_control_to_pressed_mtrl_005.png
/data/data/####/abc_scrubber_primary_mtrl_alpha.9.png
/data/data/####/abc_scrubber_track_mtrl_alpha.9.png
/data/data/####/abc_search_dropdown_item_icons_2line.xml
/data/data/####/abc_search_url_text.xml
/data/data/####/abc_search_view.xml
/data/data/####/abc_secondary_text_material_dark.xml
/data/data/####/abc_secondary_text_material_light.xml
/data/data/####/abc_seekbar_thumb_material.xml
/data/data/####/abc_seekbar_tick_mark_material.xml
/data/data/####/abc_seekbar_track_material.xml
/data/data/####/abc_select_dialog_material.xml
/data/data/####/abc_shrink_fade_out_from_bottom.xml
/data/data/####/abc_slide_in_bottom.xml
/data/data/####/abc_slide_in_top.xml
/data/data/####/abc_slide_out_bottom.xml
/data/data/####/abc_slide_out_top.xml
/data/data/####/abc_spinner_mtrl_am_alpha.9.png
/data/data/####/abc_spinner_textfield_background_material.xml
/data/data/####/abc_star_black_48dp.xml
/data/data/####/abc_star_half_black_48dp.xml
/data/data/####/abc_switch_thumb_material.xml
/data/data/####/abc_switch_track_mtrl_alpha.9.png
/data/data/####/abc_tab_indicator_material.xml
/data/data/####/abc_tab_indicator_mtrl_alpha.9.png
/data/data/####/abc_text_cursor_material.xml
/data/data/####/abc_text_select_handle_left_mtrl.png
/data/data/####/abc_text_select_handle_middle_mtrl.png
/data/data/####/abc_text_select_handle_right_mtrl.png
/data/data/####/abc_textfield_activated_mtrl_alpha.9.png
/data/data/####/abc_textfield_default_mtrl_alpha.9.png
/data/data/####/abc_textfield_search_activated_mtrl_alpha.9.png
/data/data/####/abc_textfield_search_default_mtrl_alpha.9.png
/data/data/####/abc_textfield_search_material.xml
/data/data/####/abc_tint_btn_checkable.xml
/data/data/####/abc_tint_default.xml
/data/data/####/abc_tint_edittext.xml
/data/data/####/abc_tint_seek_thumb.xml
/data/data/####/abc_tint_spinner.xml
/data/data/####/abc_tint_switch_track.xml
/data/data/####/abc_tooltip.xml
/data/data/####/abc_tooltip_enter.xml
/data/data/####/abc_tooltip_exit.xml
/data/data/####/abc_vector_test.xml
/data/data/####/adaptive_icon_drawable_wrapper.xml
/data/data/####/add_item_confirmation_activity.xml
/data/data/####/all_apps.xml
/data/data/####/all_apps_bg_hand_fill.xml
/data/data/####/all_apps_bg_hand_fill_dark.xml
/data/data/####/all_apps_button.xml
/data/data/####/all_apps_button_icon.xml
/data/data/####/all_apps_discovery_item.xml
/data/data/####/all_apps_discovery_loading_divider.xml
/data/data/####/all_apps_divider.xml
/data/data/####/all_apps_empty_search.xml
/data/data/####/all_apps_fast_scroller.xml
/data/data/####/all_apps_fastscroll_icon_anim.xml
/data/data/####/all_apps_icon.xml
/data/data/####/all_apps_search_divider.xml
/data/data/####/all_apps_search_hint.xml
/data/data/####/all_apps_search_market.xml
/data/data/####/app_icon.xml
/data/data/####/app_stats.xml
/data/data/####/app_widget_resize_frame.xml
/data/data/####/appwidget_error.xml
/data/data/####/appwidget_not_ready.xml
/data/data/####/b
/data/data/####/b.cur.prof
/data/data/####/backupscheme.xml
/data/data/####/bg_celllayout.xml
/data/data/####/btn_checkbox_checked_mtrl.xml
/data/data/####/btn_checkbox_checked_mtrl_animation_interpolator_0.xml
/data/data/####/btn_checkbox_checked_mtrl_animation_interpolator_1.xml
/data/data/####/btn_checkbox_checked_to_unchecked_mtrl_animation.xml
/data/data/####/btn_checkbox_to_checked_box_inner_merged_animation.xml
/data/data/####/btn_checkbox_to_checked_box_outer_merged_animation.xml
/data/data/####/btn_checkbox_to_checked_icon_null_animation.xml
/data/data/####/btn_checkbox_to_unchecked_box_inner_merged_animation.xml
/data/data/####/btn_checkbox_to_unchecked_check_path_merged_animation.xml
/data/data/####/btn_checkbox_to_unchecked_icon_null_animation.xml
/data/data/####/btn_checkbox_unchecked_mtrl.xml
/data/data/####/btn_checkbox_unchecked_mtrl_animation_interpolator_0.xml
/data/data/####/btn_checkbox_unchecked_mtrl_animation_interpolator_1.xml
/data/data/####/btn_checkbox_unchecked_to_checked_mtrl_animation.xml
/data/data/####/btn_radio_off_mtrl.xml
/data/data/####/btn_radio_off_to_on_mtrl_animation.xml
/data/data/####/btn_radio_on_mtrl.xml
/data/data/####/btn_radio_on_to_off_mtrl_animation.xml
/data/data/####/btn_radio_to_off_mtrl_animation_interpolator_0.xml
/data/data/####/btn_radio_to_off_mtrl_dot_group_animation.xml
/data/data/####/btn_radio_to_off_mtrl_ring_outer_animation.xml
/data/data/####/btn_radio_to_off_mtrl_ring_outer_path_animation.xml
/data/data/####/btn_radio_to_on_mtrl_animation_interpolator_0.xml
/data/data/####/btn_radio_to_on_mtrl_dot_group_animation.xml
/data/data/####/btn_radio_to_on_mtrl_ring_outer_animation.xml
/data/data/####/btn_radio_to_on_mtrl_ring_outer_path_animation.xml
/data/data/####/com.android.launcher3.device.prefs.xml
/data/data/####/com.android.launcher3.managedusers.prefs.xml
/data/data/####/com.android.launcher3.prefs.xml
/data/data/####/custom_dialog.xml
/data/data/####/decelerate_quart.xml
/data/data/####/decelerate_quint.xml
/data/data/####/deep_shortcut.xml
/data/data/####/deep_shortcuts_drag_handle.xml
/data/data/####/default_workspace_3x3.xml
/data/data/####/default_workspace_4x4.xml
/data/data/####/default_workspace_5x5.xml
/data/data/####/default_workspace_5x6.xml
/data/data/####/device_id.xml
/data/data/####/device_profiles.xml
/data/data/####/disco_bounce.xml
/data/data/####/discovery_bounce.xml
/data/data/####/downgrade_schema.json
/data/data/####/drop_target_bar_horz.xml
/data/data/####/drop_target_bar_vert.xml
/data/data/####/dw_phone_hotseat.xml
/data/data/####/dw_tablet_hotseat.xml
/data/data/####/example_appwidget_preview.png
/data/data/####/fast_out_slow_in.xml
/data/data/####/folder_application.xml
/data/data/####/folder_icon.xml
/data/data/####/folder_interpolator.xml
/data/data/####/folder_page.xml
/data/data/####/fragment_close_enter.xml
/data/data/####/fragment_close_exit.xml
/data/data/####/fragment_fade_enter.xml
/data/data/####/fragment_fade_exit.xml
/data/data/####/fragment_fast_out_extra_slow_in.xml
/data/data/####/fragment_open_enter.xml
/data/data/####/fragment_open_exit.xml
/data/data/####/gradient_bg.xml
/data/data/####/gutter_horizontal.xml
/data/data/####/horizontal_ellipsis.xml
/data/data/####/hotseat.xml
/data/data/####/ic_all_apps_bg_hand.xml
/data/data/####/ic_all_apps_bg_icon_1.xml
/data/data/####/ic_all_apps_bg_icon_2.xml
/data/data/####/ic_all_apps_bg_icon_3.xml
/data/data/####/ic_all_apps_bg_icon_4.xml
/data/data/####/ic_allapps.png
/data/data/####/ic_allapps_pressed.png
/data/data/####/ic_allapps_search.xml
/data/data/####/ic_call_answer.xml
/data/data/####/ic_call_answer_low.xml
/data/data/####/ic_call_answer_video.xml
/data/data/####/ic_call_answer_video_low.xml
/data/data/####/ic_call_decline.xml
/data/data/####/ic_call_decline_low.xml
/data/data/####/ic_info_no_shadow.xml
/data/data/####/ic_info_shadow.xml
/data/data/####/ic_instant_app_badge.xml
/data/data/####/ic_launcher.png
/data/data/####/ic_launcher.xml
/data/data/####/ic_launcher_background.xml
/data/data/####/ic_launcher_foreground.xml
/data/data/####/ic_launcher_home.png
/data/data/####/ic_launcher_home.xml
/data/data/####/ic_launcher_home_foreground.png
/data/data/####/ic_launcher_round.png
/data/data/####/ic_launcher_round.xml
/data/data/####/ic_remove_no_shadow.xml
/data/data/####/ic_remove_shadow.xml
/data/data/####/ic_setting.xml
/data/data/####/ic_star_rating.xml
/data/data/####/ic_uninstall_no_shadow.xml
/data/data/####/ic_uninstall_shadow.xml
/data/data/####/ic_wallpaper.xml
/data/data/####/ic_warning.xml
/data/data/####/ic_widget.xml
/data/data/####/ic_widget_resize_handle.png
/data/data/####/ime_base_split_test_activity.xml
/data/data/####/ime_secondary_split_test_activity.xml
/data/data/####/large_folder_preview_item_close_interpolator.xml
/data/data/####/large_folder_preview_item_open_interpolator.xml
/data/data/####/launcher.db-journal
/data/data/####/launcher.xml
/data/data/####/launcher_preferences.xml
/data/data/####/main.xml
/data/data/####/no_anim.xml
/data/data/####/notification.xml
/data/data/####/notification_action.xml
/data/data/####/notification_action_background.xml
/data/data/####/notification_action_tombstone.xml
/data/data/####/notification_bg.xml
/data/data/####/notification_bg_low.xml
/data/data/####/notification_bg_low_normal.9.png
/data/data/####/notification_bg_low_pressed.9.png
/data/data/####/notification_bg_normal.9.png
/data/data/####/notification_bg_normal_pressed.9.png
/data/data/####/notification_footer.xml
/data/data/####/notification_icon_background.xml
/data/data/####/notification_main.xml
/data/data/####/notification_oversize_large_icon_bg.png
/data/data/####/notification_pref_warning.xml
/data/data/####/notification_template_custom_big.xml
/data/data/####/notification_template_icon_group.xml
/data/data/####/notification_template_part_chronometer.xml
/data/data/####/notification_template_part_time.xml
/data/data/####/notification_tile_bg.xml
/data/data/####/notify_panel_notification_icon_bg.png
/data/data/####/overview_button_anim.xml
/data/data/####/overview_panel.xml
/data/data/####/page_indicator.xml
/data/data/####/pending_widget_bg.xml
/data/data/####/popup_container.xml
/data/data/####/pref.xml
/data/data/####/qsb_default_view.xml
/data/data/####/resources.arsc
/data/data/####/round_rect_primary.xml
/data/data/####/search_container_all_apps.xml
/data/data/####/search_container_workspace.xml
/data/data/####/select_dialog_item_material.xml
/data/data/####/select_dialog_multichoice_material.xml
/data/data/####/select_dialog_singlechoice_material.xml
/data/data/####/shortcuts_item.xml
/data/data/####/simple_clock_widget.xml
/data/data/####/support_simple_spinner_dropdown_item.xml
/data/data/####/switch_thumb_material_dark.xml
/data/data/####/switch_thumb_material_light.xml
/data/data/####/system_shortcut.xml
/data/data/####/system_shortcut_icon_only.xml
/data/data/####/system_shortcut_icons.xml
/data/data/####/task_open_enter.xml
/data/data/####/test_level_drawable.xml
/data/data/####/tooltip_frame_dark.xml
/data/data/####/tooltip_frame_light.xml
/data/data/####/user_folder.xml
/data/data/####/user_folder_icon_normalized.xml
/data/data/####/vector_tint_color.xml
/data/data/####/vector_tint_theme_color.xml
/data/data/####/view_board.xml
/data/data/####/widget_cell.xml
/data/data/####/widget_cell_content.xml
/data/data/####/widget_internal_focus_bg.xml
/data/data/####/widget_list_divider.xml
/data/data/####/widget_resize_frame.9.png
/data/data/####/widget_resize_shadow.9.png
/data/data/####/widgets_bottom_sheet.xml
/data/data/####/widgets_list_row_view.xml
/data/data/####/widgets_scroll_container.xml
/data/data/####/widgets_view.xml
/data/data/####/workspace_bg.9.png
/data/data/####/workspace_screen.xml
/data/data/####/zzz_dummy_widget.xml
/data/data/####/zzz_weight_watcher.xml
/databases/launcher.db

Miscellaneous:

Loads the following dynamic libraries:

libtattoo

Accesses the ITelephony private interface.

Changes volume and vibration settings.

Gets information about installed apps.

Displays its own windows over windows of other apps.

Технологии

Термины

Обучение и просвещение

Мифы

Technical information

Рекомендации по лечению

Демо бесплатно на 14 дней