Technical information
Malicious functions:
Gains access to the ITelephony private interface.
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) a####.google####.com:80
- TCP(HTTP/1.1) www.niaz####.ir:80
- TCP(HTTP/1.1) niaz####.ir:80
- TCP(HTTP/1.1) en####.webg####.ir:80
- TCP(HTTP/1.1) d####.theme-w####.ir:80
- TCP(HTTP/1.1) www.webg####.com:80
- TCP(HTTP/1.1) www.webg####.ir:80
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) www.gst####.com:443
- TCP(TLS/1.0) f####.google####.com:443
DNS requests:
- a####.google####.com
- d####.theme-w####.ir
- en####.webg####.ir
- f####.google####.com
- iranweb####.com
- niaz####.ir
- www.go####.com
- www.gst####.com
- www.iranweb####.com
- www.niaz####.ir
- www.webg####.com
- www.webg####.ir
HTTP GET requests:
- a####.google####.com/ajax/libs/jquery/1.10.2/jquery.min.js?ver=####
- d####.theme-w####.ir/arg/wp-content/themes/arg/img/phone-icon.png
- d####.theme-w####.ir/arg/wp-content/uploads/2016/05/1-min.jpg
- d####.theme-w####.ir/arg/wp-content/uploads/2016/05/5-min.jpg
- en####.webg####.ir/counter/xstat.aspx?t=####&code=####&rnd=####&s=####&c...
- niaz####.ir/
- www.niaz####.ir/
- www.niaz####.ir/ads
- www.niaz####.ir/ads/
- www.niaz####.ir/android1.png
- www.niaz####.ir/app.apk
- www.niaz####.ir/img/footer_bg.png
- www.niaz####.ir/wp-content/plugins/classipress-bump-ad/script.js?ver=####
- www.niaz####.ir/wp-content/plugins/classipress-bump-ad/style.css?ver=####
- www.niaz####.ir/wp-content/plugins/contact-form-7/includes/css/styles-rt...
- www.niaz####.ir/wp-content/plugins/contact-form-7/includes/css/styles.cs...
- www.niaz####.ir/wp-content/plugins/contact-form-7/includes/js/jquery.for...
- www.niaz####.ir/wp-content/plugins/contact-form-7/includes/js/scripts.js...
- www.niaz####.ir/wp-content/plugins/cp_ribon/css/ribon.css?ver=####
- www.niaz####.ir/wp-content/plugins/cp_ribon/images/ribbon_featured4.png
- www.niaz####.ir/wp-content/plugins/nasim-city-state/assets/css/ncs.css?v...
- www.niaz####.ir/wp-content/plugins/nasim-city-state/assets/js/nasim_city...
- www.niaz####.ir/wp-content/plugins/nasim-cp-ads/nasim-cp-ads.css?ver=####
- www.niaz####.ir/wp-content/plugins/ncp-feature-ad/script.js?ver=####
- www.niaz####.ir/wp-content/plugins/ncp-feature-ad/style.css?ver=####
- www.niaz####.ir/wp-content/plugins/ncp-subcat/assets/css/metisMenu.min.c...
- www.niaz####.ir/wp-content/plugins/ncp-subcat/assets/css/style.css?ver=#...
- www.niaz####.ir/wp-content/plugins/ncp-subcat/assets/img/pattern.png
- www.niaz####.ir/wp-content/plugins/ncp-subcat/assets/img/plus_white.png
- www.niaz####.ir/wp-content/plugins/ncp-subcat/assets/js/metisMenu.min.js...
- www.niaz####.ir/wp-content/plugins/sc-iranmap-pro/assets/js/ammap.js?ver...
- www.niaz####.ir/wp-content/plugins/sc-iranmap-pro/assets/js/iranLow.js?v...
- www.niaz####.ir/wp-content/plugins/sc-iranmap-pro/assets/js/iranmap_fron...
- www.niaz####.ir/wp-content/plugins/statify-ultimate/style.css?ver=####
- www.niaz####.ir/wp-content/plugins/woocommerce/assets/css/woocommerce-la...
- www.niaz####.ir/wp-content/plugins/woocommerce/assets/css/woocommerce-sm...
- www.niaz####.ir/wp-content/plugins/woocommerce/assets/css/woocommerce.cs...
- www.niaz####.ir/wp-content/plugins/woocommerce/assets/js/frontend/add-to...
- www.niaz####.ir/wp-content/plugins/woocommerce/assets/js/frontend/cart-f...
- www.niaz####.ir/wp-content/plugins/woocommerce/assets/js/frontend/woocom...
- www.niaz####.ir/wp-content/plugins/woocommerce/assets/js/jquery-blockui/...
- www.niaz####.ir/wp-content/plugins/woocommerce/assets/js/jquery-cookie/j...
- www.niaz####.ir/wp-content/themes/arg/css/bootstrap-theme.min.css
- www.niaz####.ir/wp-content/themes/arg/css/bootstrap.min.css
- www.niaz####.ir/wp-content/themes/arg/css/font-awesome.min.css
- www.niaz####.ir/wp-content/themes/arg/css/jquery.smartmenus.bootstrap.css
- www.niaz####.ir/wp-content/themes/arg/css/lightbox.min.css
- www.niaz####.ir/wp-content/themes/arg/css/lightgallery.css
- www.niaz####.ir/wp-content/themes/arg/css/portfolio.css
- www.niaz####.ir/wp-content/themes/arg/css/slippry.css
- www.niaz####.ir/wp-content/themes/arg/font/IRANSans-bold/ttf/IRANSansWeb...
- www.niaz####.ir/wp-content/themes/arg/font/IRANSans/ttf/IRANSansWeb(FaNu...
- www.niaz####.ir/wp-content/themes/arg/fonts/fontawesome-webfont.ttf?v=####
- www.niaz####.ir/wp-content/themes/arg/images/close.png
- www.niaz####.ir/wp-content/themes/arg/images/loading.gif
- www.niaz####.ir/wp-content/themes/arg/images/next.png
- www.niaz####.ir/wp-content/themes/arg/images/prev.png
- www.niaz####.ir/wp-content/themes/arg/images/widget/article.png
- www.niaz####.ir/wp-content/themes/arg/images/widget/link.png
- www.niaz####.ir/wp-content/themes/arg/images/widget/text.png
- www.niaz####.ir/wp-content/themes/arg/img/arrows.svg
- www.niaz####.ir/wp-content/themes/arg/img/bg-grad-white.png
- www.niaz####.ir/wp-content/themes/arg/img/bg.png
- www.niaz####.ir/wp-content/themes/arg/img/footer_title_bg.png
- www.niaz####.ir/wp-content/themes/arg/img/gotop.png
- www.niaz####.ir/wp-content/themes/arg/img/icon.png
- www.niaz####.ir/wp-content/themes/arg/img/menu-left.png
- www.niaz####.ir/wp-content/themes/arg/img/sy-loader.gif
- www.niaz####.ir/wp-content/themes/arg/inc/template/dynamic-style.php
- www.niaz####.ir/wp-content/themes/arg/js/bootstrap.js
- www.niaz####.ir/wp-content/themes/arg/js/jquery.js
- www.niaz####.ir/wp-content/themes/arg/js/jquery.smartmenus.bootstrap.js
- www.niaz####.ir/wp-content/themes/arg/js/jquery.smartmenus.js
- www.niaz####.ir/wp-content/themes/arg/js/lg-autoplay.min.js
- www.niaz####.ir/wp-content/themes/arg/js/lg-fullscreen.min.js
- www.niaz####.ir/wp-content/themes/arg/js/lightgallery.min.js
- www.niaz####.ir/wp-content/themes/arg/js/script.js
- www.niaz####.ir/wp-content/themes/arg/js/slippry.min.js
- www.niaz####.ir/wp-content/themes/arg/owl-carousel/owl.carousel.css
- www.niaz####.ir/wp-content/themes/arg/owl-carousel/owl.carousel.min.js
- www.niaz####.ir/wp-content/themes/arg/owl-carousel/owl.theme.css
- www.niaz####.ir/wp-content/themes/arg/style.css
- www.niaz####.ir/wp-content/themes/classipress/framework/styles/jquery-ui...
- www.niaz####.ir/wp-content/themes/classipress/includes/js/jquery.tinynav...
- www.niaz####.ir/wp-content/themes/classipress/includes/js/theme-scripts....
- www.niaz####.ir/wp-content/themes/classipress/theme-framework/js/footabl...
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/fonts/DroidArabicNaskh...
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/images/btn_searchBar.png
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/images/select.png
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/inc/css/font-awesome.m...
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/inc/css/popModal.min.c...
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/inc/fonts/fontawesome-...
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/inc/js/jquery.cookie.j...
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/inc/js/jquery.grid.js?...
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/inc/js/jquery.sifs.js?...
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/inc/js/popModal.min.js...
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/inc/js/wpifs.js?ver=####
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/style.css?ver=####
- www.niaz####.ir/wp-content/themes/vitrin-nasimnet/style/default.css?ver=...
- www.niaz####.ir/wp-content/uploads/2016/02/244748-153x153.jpg
- www.niaz####.ir/wp-content/uploads/2016/05/10-min.jpg
- www.niaz####.ir/wp-content/uploads/2016/05/7-min.jpg
- www.niaz####.ir/wp-content/uploads/2016/05/8-min.jpg
- www.niaz####.ir/wp-content/uploads/2016/05/9-min.jpg
- www.niaz####.ir/wp-content/uploads/2016/06/cropped-niazpars-1.png
- www.niaz####.ir/wp-content/uploads/2016/08/gemfile120.gif
- www.niaz####.ir/wp-content/uploads/2016/12/4-1-230x175.jpg
- www.niaz####.ir/wp-content/uploads/2016/12/divar.jpg
- www.niaz####.ir/wp-content/uploads/2016/12/facebook.jpg
- www.niaz####.ir/wp-content/uploads/2016/12/fardablog.jpg
- www.niaz####.ir/wp-content/uploads/2016/12/gemfile-1-230x175.jpg
- www.niaz####.ir/wp-content/uploads/2016/12/gemfile-290x300.png
- www.niaz####.ir/wp-content/uploads/2016/12/head-bg-3.jpg
- www.niaz####.ir/wp-content/uploads/2016/12/home3.png
- www.niaz####.ir/wp-content/uploads/2016/12/info-panel-2.jpg
- www.niaz####.ir/wp-content/uploads/2016/12/logo.png
- www.niaz####.ir/wp-content/uploads/2016/12/nazmihan.jpg
- www.niaz####.ir/wp-content/uploads/2016/12/photo-blog-2-220x125.jpg
- www.niaz####.ir/wp-content/uploads/2016/12/photo-blog1-2-220x125.jpg
- www.niaz####.ir/wp-content/uploads/2016/12/photo-shop-1.png
- www.niaz####.ir/wp-content/uploads/2016/12/photo-shop.png
- www.niaz####.ir/wp-content/uploads/2016/12/robat-bazaryab.jpg
- www.niaz####.ir/wp-content/uploads/2016/12/slider-1.jpg
- www.niaz####.ir/wp-content/uploads/2017/01/map.jpg
- www.niaz####.ir/wp-content/uploads/2017/01/photo-blog-4-220x125.png
- www.niaz####.ir/wp-content/uploads/2017/01/photo-blog3-220x125.png
- www.niaz####.ir/wp-content/uploads/2017/01/robat-bazaryab-shop.jpg
- www.niaz####.ir/wp-content/uploads/2017/01/robat-seo1.jpg
- www.niaz####.ir/wp-content/uploads/2017/05/Powered-By-www.IRANWEBSHOP.co...
- www.niaz####.ir/wp-content/uploads/2017/05/digikala-230x175.jpg
- www.niaz####.ir/wp-content/uploads/2017/07/1-290x300.jpg
- www.niaz####.ir/wp-content/uploads/2017/08/3-.jpg
- www.niaz####.ir/wp-content/uploads/2017/09/ok.jpg
- www.niaz####.ir/wp-content/uploads/2018/01/netbargim.jpg
- www.niaz####.ir/wp-content/uploads/2018/01/slider-4.jpg
- www.niaz####.ir/wp-content/uploads/2018/02/android-300x2221.png
- www.niaz####.ir/wp-content/uploads/2018/03/272752-153x153.jpg
- www.niaz####.ir/wp-content/uploads/2018/03/401729-153x153.jpg
- www.niaz####.ir/wp-content/uploads/2018/03/605219-153x153.jpg
- www.niaz####.ir/wp-content/uploads/2018/04/366847-153x153.jpg
- www.niaz####.ir/wp-content/uploads/2018/04/388705-153x153.jpg
- www.niaz####.ir/wp-content/uploads/2018/04/49252-153x153.gif
- www.niaz####.ir/wp-content/uploads/2018/04/521193-153x153.jpg
- www.niaz####.ir/wp-content/uploads/2018/04/586903-153x153.jpg
- www.niaz####.ir/wp-content/uploads/2018/04/817482-153x153.jpg
- www.niaz####.ir/wp-content/uploads/2018/04/841377-153x153.jpg
- www.niaz####.ir/wp-content/uploads/2018/04/952921-153x153.jpg
- www.niaz####.ir/wp-includes/css/dashicons.min.css?ver=####
- www.niaz####.ir/wp-includes/js/jquery/jquery-migrate.min.js?ver=####
- www.niaz####.ir/wp-includes/js/jquery/jquery.js?ver=####
- www.niaz####.ir/wp-includes/js/jquery/jquery.ui.touch-punch.js?ver=####
- www.niaz####.ir/wp-includes/js/jquery/ui/autocomplete.min.js?ver=####
- www.niaz####.ir/wp-includes/js/jquery/ui/core.min.js?ver=####
- www.niaz####.ir/wp-includes/js/jquery/ui/menu.min.js?ver=####
- www.niaz####.ir/wp-includes/js/jquery/ui/mouse.min.js?ver=####
- www.niaz####.ir/wp-includes/js/jquery/ui/position.min.js?ver=####
- www.niaz####.ir/wp-includes/js/jquery/ui/slider.min.js?ver=####
- www.niaz####.ir/wp-includes/js/jquery/ui/widget.min.js?ver=####
- www.niaz####.ir/wp-includes/js/wp-a11y.min.js?ver=####
- www.niaz####.ir/wp-includes/js/wp-embed.min.js?ver=####
- www.niaz####.ir/wp-includes/js/wp-emoji-release.min.js?ver=####
- www.webg####.com/counter/pic/stat4.gif
- www.webg####.ir/c.aspx?Code=####&t=####
HTTP POST requests:
- www.niaz####.ir/?wc-ajax=####
Modified file system:
Creates the following files:
- /data/data/####/WebViewSettings.xml
- /data/data/####/data_0
- /data/data/####/data_1
- /data/data/####/data_2
- /data/data/####/data_3
- /data/data/####/f_000001
- /data/data/####/f_000002
- /data/data/####/f_000003
- /data/data/####/f_000004
- /data/data/####/f_000005
- /data/data/####/f_000006
- /data/data/####/f_000007
- /data/data/####/f_000008
- /data/data/####/f_000009
- /data/data/####/f_00000a
- /data/data/####/f_00000b
- /data/data/####/f_00000c
- /data/data/####/f_00000d
- /data/data/####/f_00000e
- /data/data/####/f_00000f
- /data/data/####/f_000010
- /data/data/####/f_000011
- /data/data/####/f_000012
- /data/data/####/f_000013
- /data/data/####/f_000014
- /data/data/####/f_000015
- /data/data/####/f_000016
- /data/data/####/f_000017
- /data/data/####/f_000018
- /data/data/####/f_000019
- /data/data/####/f_00001a
- /data/data/####/f_00001b
- /data/data/####/f_00001c
- /data/data/####/f_00001d
- /data/data/####/f_00001e
- /data/data/####/f_00001f
- /data/data/####/f_000020
- /data/data/####/f_000021
- /data/data/####/f_000022
- /data/data/####/f_000023
- /data/data/####/f_000024
- /data/data/####/f_000025
- /data/data/####/f_000026
- /data/data/####/f_000027
- /data/data/####/f_000028
- /data/data/####/f_000029
- /data/data/####/f_00002a
- /data/data/####/f_00002b
- /data/data/####/f_00002c
- /data/data/####/f_00002d
- /data/data/####/f_00002e
- /data/data/####/f_00002f
- /data/data/####/f_000030
- /data/data/####/f_000031
- /data/data/####/f_000032
- /data/data/####/f_000033
- /data/data/####/f_000034
- /data/data/####/f_000035
- /data/data/####/f_000036
- /data/data/####/f_000037
- /data/data/####/f_000038
- /data/data/####/f_000039
- /data/data/####/f_00003a
- /data/data/####/f_00003b
- /data/data/####/f_00003c
- /data/data/####/f_00003d
- /data/data/####/f_00003e
- /data/data/####/f_00003f
- /data/data/####/f_000040
- /data/data/####/f_000041
- /data/data/####/index
- /data/data/####/webview.db-journal
- /data/data/####/webviewCookiesChromium.db-journal
- /data/media/####/app.apk
Miscellaneous:
Displays its own windows over windows of other applications.
