Technical information
Malicious functions:
Sends SMS messages:
- +32400: ON PIFE
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) fil####.apk####.com:80
- TCP(HTTP/1.1) contro####.viland####.com:80
- TCP(HTTP/1.1) ma####.bootstr####.com:80
- TCP(HTTP/1.1) mobigen####.com:80
- TCP(HTTP/1.1) game####.topmobi####.com:80
- TCP(TLS/1.0) lh3.googleu####.com:443
- TCP(TLS/1.0) ssl.google-####.com:443
DNS requests:
- contro####.viland####.com
- fil####.apk####.com
- game####.topmobi####.com
- lh3.googleu####.com
- ma####.bootstr####.com
- mobigen####.com
- set####.viland####.com
- ssl.google-####.com
HTTP GET requests:
- contro####.viland####.com/apksubs.php?&shortcode=####&keyword=####
- contro####.viland####.com/demo.php
- contro####.viland####.com/shotcut_setting.php?&isDelay=####&packageName=...
- fil####.apk####.com/games/TubeMate.apk
- game####.topmobi####.com/games/2048-growup/img/icon/icon-120x120.png
- game####.topmobi####.com/games/african-savannah/img/icon/icon-120x120.png
- game####.topmobi####.com/games/bubble-zoobies/img/icon/icon-120x120.png
- game####.topmobi####.com/games/daily-heggies/img/icon/icon-120x120.png
- game####.topmobi####.com/games/fairy-word-search/img/icon/icon-120x120.png
- game####.topmobi####.com/games/ferris-wheel/img/icon/icon-120x120.png
- game####.topmobi####.com/games/frog-jumper/img/icon/icon-120x120.png
- game####.topmobi####.com/games/ghost-bubbles/img/icon/icon-120x120.png
- game####.topmobi####.com/games/gold-miner/img/icon/icon-120x120.png
- game####.topmobi####.com/games/happy-zoobies/img/icon/icon-120x120.png
- game####.topmobi####.com/games/main-power/img/icon/icon-120x120.png
- game####.topmobi####.com/games/supermarket-numbers/img/icon/icon-120x120...
- game####.topmobi####.com/games/swipe-a-car/img/icon/icon-120x120.png
- game####.topmobi####.com/games/totem-blast/img/icon/icon-120x120.png
- game####.topmobi####.com/games/tower-of-hanoi/img/icon/icon-120x120.png
- game####.topmobi####.com/games/treasure-hunt/img/icon/icon-120x120.png
- game####.topmobi####.com/games/zoo-animals/img/icon/icon-120x120.png
- game####.topmobi####.com/games/zuma-ball/img/icon/icon-120x120.png
- ma####.bootstr####.com/font-awesome/4.7.0/css/font-awesome.min.css?ver=#...
- ma####.bootstr####.com/font-awesome/4.7.0/fonts/fontawesome-webfont.ttf?...
- mobigen####.com/
- mobigen####.com/ringtones/
- mobigen####.com/wp-content/plugins/vt-ringtones/admin/js/rt-js.js?ver=####
- mobigen####.com/wp-content/themes/anhnbt-theme/css/bootstrap.min.css?ver...
- mobigen####.com/wp-content/themes/anhnbt-theme/css/style.css?ver=####
- mobigen####.com/wp-content/themes/anhnbt-theme/images/button_bg.png
- mobigen####.com/wp-content/themes/anhnbt-theme/images/header-bg.png
- mobigen####.com/wp-content/themes/anhnbt-theme/js/bootstrap.min.js?ver=#...
- mobigen####.com/wp-content/themes/anhnbt-theme/js/jplayer/blue.monday/cs...
- mobigen####.com/wp-content/themes/anhnbt-theme/js/jplayer/circleplayer/c...
- mobigen####.com/wp-content/themes/anhnbt-theme/js/jplayer/circleplayer/j...
- mobigen####.com/wp-content/themes/anhnbt-theme/js/jplayer/jquery.jplayer...
- mobigen####.com/wp-content/themes/anhnbt-theme/js/menu.js?ver=####
- mobigen####.com/wp-content/themes/anhnbt-theme/style.css
- mobigen####.com/wp-content/uploads/2018/01/111-topmobile-challenge-funny...
- mobigen####.com/wp-content/uploads/2018/01/121-topmobile-challenge-funny...
- mobigen####.com/wp-content/uploads/2018/01/1_l45u3LFBEBZoXSWRShH0kA-150x...
- mobigen####.com/wp-content/uploads/2018/01/1bd73655e481441a91d1cb76393af...
- mobigen####.com/wp-content/uploads/2018/01/maxresdefault-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/p05qf0jp-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-1-1-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-1-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-1-150x150.png
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-1-2-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-1-3-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-1-4-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-1-5-150x139.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-150x150.png
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-2-1-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-2-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-3-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-4-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-5-150x150.jpg
- mobigen####.com/wp-content/uploads/2018/01/tải-xuống-6-150x150.jpg
- mobigen####.com/wp-content/uploads/ringtones/disco_girl.mp3
- mobigen####.com/wp-content/uploads/ringtones/fabriziof_delirium.mp3
- mobigen####.com/wp-content/uploads/ringtones/kiss_x_sis.mp3
- mobigen####.com/wp-content/uploads/ringtones/listen_to_your_heart.mp3
- mobigen####.com/wp-content/uploads/ringtones/lofi_levi_you.mp3
- mobigen####.com/wp-content/uploads/ringtones/midoriya_smaaash_dub.mp3
- mobigen####.com/wp-content/uploads/ringtones/pantelidis_aggelos2.mp3
- mobigen####.com/wp-content/uploads/ringtones/pantelidis_erwtasgam.mp3
- mobigen####.com/wp-content/uploads/ringtones/route_73.mp3
- mobigen####.com/wp-content/uploads/ringtones/shanahan_wastingtime.mp3
- mobigen####.com/wp-content/uploads/ringtones/sleepless_nights.mp3
- mobigen####.com/wp-content/uploads/ringtones/u_deserve_my_praise.mp3
- mobigen####.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=####
- mobigen####.com/wp-includes/js/jquery/jquery.js?ver=####
- mobigen####.com/wp-includes/js/wp-embed.min.js?ver=####
- mobigen####.com/wp-includes/js/wp-emoji-release.min.js?ver=####
Modified file system:
Creates the following files:
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/f_000001
- <Package Folder>/cache/####/f_000002
- <Package Folder>/cache/####/f_000003
- <Package Folder>/cache/####/f_000004
- <Package Folder>/cache/####/f_000005
- <Package Folder>/cache/####/f_000006
- <Package Folder>/cache/####/f_000007
- <Package Folder>/cache/####/f_000008
- <Package Folder>/cache/####/f_000009
- <Package Folder>/cache/####/f_00000a
- <Package Folder>/cache/####/index
- <Package Folder>/databases/google_analytics_v4.db-journal
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal
- <Package Folder>/files/gaClientId
- <Package Folder>/shared_prefs/<Package>_preferences.xml
- <Package Folder>/shared_prefs/com.google.android.gms.analytics.prefs.xml
- <SD-Card>/<Package>.tmp
Miscellaneous:
Gains access to network information.
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
