Technical information
Malicious functions:
Sends SMS messages:
- 0096179149966: Sorry, I can't talk right now.d875e355c4f88a75-n
Network activity:
Connecting to:
- ga####.com
- c####.####.net
- loli####.org
- d3v1lb8####.####.net
- a####.####.com
- dream-i####.com
- appo####.####.com
HTTP GET requests:
- d3v1lb8####.####.net/output_static/ui/browser-forward-x1.png
- d3v1lb8####.####.net/output_static/ui/rocket-icon-embossed.png
- d3v1lb8####.####.net/output_static/ui/tiny-glow.png
- d3v1lb8####.####.net/output_static/ui/v4vc-alert-bg-x2.png
- d3v1lb8####.####.net/output_static/ui/browser-stop-x1.png
- d3v1lb8####.####.net/output_static/ui/browser-back-x1.png
- d3v1lb8####.####.net/output_static/ui/bg-applelinen-tile.png
- d3v1lb8####.####.net/output_static/ui/end-card-replay-normal-x2.png
- loli####.org/h3/balmanager/n_pointscenter?_nocache=####&devuid=####&vers=####&AppName=####&platform=####&usuid=####
- d3v1lb8####.####.net/output_static/ui/browser-bar-background.png
- ga####.com/adscentral/adsmgr/filltheadsarea_html/?_nocache=####&devuid=####&vers=####&platform=####&fakeappname=####&AppName=####
- d3v1lb8####.####.net/output_static/ui/v4vc-btn-confirm-normal-x2.png
- loli####.org/h3/identifiereng/check_for_my_identity?_nocache=####&devuid=####&vers=####&machname=####&AppName=####&platform=####
- d3v1lb8####.####.net/output_static/ui/browser-close-x1.png
- d3v1lb8####.####.net/output_static/ui/browser-reload-x1.png
- dream-i####.com/gcmhandler/versioner/cur_numberbouk_vers
- d3v1lb8####.####.net/output_static/ui/v4vc-bg-full.png
- a####.####.com/AdRequest/GetAd?R_AppBundle=####&R_AppVer=####&R_AppName=####&D_RAM_FSZ=####&D_CAPS=####&dateTime=####&D_MCC=####&D_UA=####&D_DM=####&D...
- appo####.####.com/ep/url
- d3v1lb8####.####.net/output_static/ui/v4vc-btn-confirm-down-x2.png
- d3v1lb8####.####.net/output_static/ui/end-card-close-down-x2.png
- d3v1lb8####.####.net/output_static/ui/v4vc-alert-logo-x2.png
- d3v1lb8####.####.net/output_static/ui/browser-logo-tablet-x1.png
- d3v1lb8####.####.net/output_static/ui/end-card-close-normal-x2.png
- loli####.org/h3/search/startup_new?_nocache=####&curAutoCoding=####&devuid=####&vers=####&machname=####&AppName=####&platform=####&lang=####
- d3v1lb8####.####.net/output_static/ui/v4vc-btn-cancel-down-x2.png
- d3v1lb8####.####.net/mraid/production/adc_mraid-tablet-android.js
- d3v1lb8####.####.net/output_static/ui/v4vc-btn-cancel-normal-x2.png
- c####.####.net/output/videos/hd_71275.m4v
- d3v1lb8####.####.net/output_static/ui/end-card-replay-down-x2.png
Modified file system:
Creates the following files:
- /data/data/####/files/adc/media/1.png
- /data/data/####/files/adc/media/3.png
- /data/data/####/shared_prefs/sdkPrefs.xml
- /data/data/####/files/INSTALLATION
- /data/data/####/files/adc/media/21.png
- /data/data/####/files/adc/media/23.png
- /data/data/####/files/adc/data/zone_state.txt
- /data/data/####/files/adc/media/10.js
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/files/adc/media/15.m4v
- /data/data/####/databases/google_analytics_v4.db-journal
- /data/data/####/files/adc/data/tracking_info.txt
- /data/data/####/cache/ads1452756019.jar
- /data/data/####/shared_prefs/ADFSessionUtil.xml
- /data/data/####/files/adc/media/19.png
- /data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml.bak
- /data/data/####/files/adc/media/14.png
- /data/data/####/files/adc/media/16.png
- /data/data/####/files/adc/media/17.png
- /data/data/####/shared_prefs/video_ad_call.xml
- /data/data/####/files/adc/media/4.png
- /data/data/####/shared_prefs/com.google.android.gms.measurement.prefs.xml
- /data/data/####/files/adc/media/8.png
- /data/data/####/files/adc/media/9.png
- /data/data/####/files/adc/media/2.png
- /data/data/####/files/adc/media/18.png
- /data/data/####/shared_prefs/####.xml
- /data/data/####/files/adc/data/media_info.txt
- /data/data/####/files/adc/media/12.png
- /data/data/####/files/adc/media/13.png
- /data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml
- /data/data/####/databases/webview.db-journal
- /data/data/####/files/gaClientId
- /data/data/####/files/adc/data/iap_cache.txt
- /data/data/####/files/adc/media/5.png
- /data/data/####/files/adc/media/6.png
- /data/data/####/files/adc/media/7.png
- /data/data/####/files/adc/media/20.png
- /data/data/####/files/adc/media/22.png
- /data/data/####/cache/ApplicationCache.db-journal
- /data/data/####/shared_prefs/ap_app_details.xml
- /data/data/####/files/adc/data/manifest.txt
- /data/data/####/files/adc/media/11.png
- /data/data/####/cache/webviewCacheChromium/index
- /data/data/####/shared_prefs/next_ad_call.xml
Miscellaneous:
Contains functionality to send SMS messages automatically.
