Technical information
Malicious functions:
Sends SMS messages:
- 1888888888: ####
Network activity:
Connecting to:
- admin####.####.top
- e####.####.com
- m####.####.com
- h####.####.com
- i####.####.com
HTTP GET requests:
- h####.####.com/h.js?686514f####
- i####.####.com/images/mall/logo/1364886745838.jpg
- admin####.####.top/pic/ponpai.jpg
- i####.####.com/images/mall/logo/jumei.png
- i####.####.com/images/mall/logo/7daysinn.jpg
- m####.####.com/mall/779.html
- i####.####.com/images/download/57zhe.png
- admin####.####.top/index_files/TB1RBBGHpXXXXXUaXXXXXXXXXXX_!!0-item_pic....
- admin####.####.top/index_files/21(2).gif
- i####.####.com/images/mall/logo/m_570321b3f20dd.png
- i####.####.com/images/mall/logo/yihaodian.png
- admin####.####.top/pic/loading.gif
- admin####.####.top/upfile/Photo/20170104003653163.jpg
- admin####.####.top/index_1.asp?id=####
- admin####.####.top/upfile/Photo/20170104003248045.jpg
- admin####.####.top/index_files/21.gif
- i####.####.com/images/mall/logo/1469158722883.jpg
- i####.####.com/images/mall/logo/1288332303989.jpg
- i####.####.com/images/mall/logo/1379516460604.jpg
- i####.####.com/images/mall/logo/91datong.jpg
- admin####.####.top/index_files/h.js(3).%E4%B8%8B%E8%BD%BD
- admin####.####.top/index_files/TB23MYanVXXXXbxXpXXXXXXXXXX_!!2457537591....
- i####.####.com/images/mall/logo/m_575509973c235.png
- admin####.####.top/index_files/h.js(4).%E4%B8%8B%E8%BD%BD
- admin####.####.top/
- i####.####.com/images/mall/logo/1338452950233.jpg
- admin####.####.top/upfile/Photo/20170104003248380.jpg
- admin####.####.top/index_files/v.js(5).%E4%B8%8B%E8%BD%BD
- i####.####.com/stylesheet/mall5.css
- i####.####.com/images/mall/logo/m_57f8b108e0adb.jpg
- m####.####.com/
- admin####.####.top/index_files/TB2LTqkdHOJ.eBjy1XaXXbNupXa_!!2873125763....
- admin####.####.top/index_files/v.js(2).%E4%B8%8B%E8%BD%BD
- admin####.####.top/js/viw.js
- admin####.####.top/favicon.ico
- i####.####.com/images/mall/logo/m_57073dd623a02.png
- i####.####.com/images/download/close.png
- admin####.####.top/upfile/Photo/20170104003653295.jpg
- admin####.####.top/pic/shouhuo.jpg
- i####.####.com/javascript/all.js?v=####
- i####.####.com/images/mall/logo/qinqin.png
- admin####.####.top/index_files/all.js.%E4%B8%8B%E8%BD%BD
- i####.####.com/images/mall/logo/aidai.jpg
- admin####.####.top/index_files/21(4).gif
- admin####.####.top/index_files/21(5).gif
- i####.####.com/images/icon/i_bg.jpg
- i####.####.com/images/mall/logo/1413945962884.jpg
- m####.####.com/mall/ka.html
- i####.####.com/images/mall/logo/m_5705fae6d28c2.png
- i####.####.com/stylesheet/mall2.css
- admin####.####.top/index_files/v.js(4).%E4%B8%8B%E8%BD%BD
- m####.####.com/images/loading2.gif
- i####.####.com/images/mall/logo/m_5832f1aeb1355.jpg
- admin####.####.top/img/goback.png
- admin####.####.top/index_files/h.js(1).%E4%B8%8B%E8%BD%BD
- admin####.####.top/pic/danbao.jpg
- i####.####.com/images/mall/logo/m_546c32870f632.png
- admin####.####.top/pic/shim.jpg
- admin####.####.top/pic/bjico.png
- i####.####.com/stylesheet/pager.css
- i####.####.com/images/mall/logo/77zuo.png
- admin####.####.top/css/index.css
- admin####.####.top/index_files/TB2wZ2dkFXXXXbJXXXXXXXXXXXX_!!2750933985....
- admin####.####.top/index_files/21(3).gif
- admin####.####.top/index_files/v.js(1).%E4%B8%8B%E8%BD%BD
- i####.####.com/images/mall/logo/m_5630212ab680b.jpg
- i####.####.com/images/mall/logo/m_5281946a1f64c.jpg
- admin####.####.top/index_files/h.js.%E4%B8%8B%E8%BD%BD
- admin####.####.top/index_files/zhe.css
- e####.####.com/hmt/icon/21.gif
- admin####.####.top/index_files/TB1BylcOFXXXXbzXVXXXXXXXXXX_!!0-item_pic....
- i####.####.com/images/mall/logo/m_57b2e14dc572a.png
- admin####.####.top/pic/shoucang.jpg
- i####.####.com/images/mall/logo/syt.jpg
- admin####.####.top/index_files/v.js(3).%E4%B8%8B%E8%BD%BD
- admin####.####.top/pic/map.jpg
- h####.####.com/hm.gif?cc=####&ck=####&cl=####&ds=####&et=####&ja=####&ln...
- i####.####.com/javascript/android.js
- admin####.####.top/index_files/21(1).gif
- admin####.####.top/product.asp?id=####
- admin####.####.top/index_files/style.css
- admin####.####.top/pic/shul.jpg
- m####.####.com/assets/509ca226/listview/jquery.yiilistview.js
- admin####.####.top/index_files/v.js.%E4%B8%8B%E8%BD%BD
- admin####.####.top/index_files/h.js(2).%E4%B8%8B%E8%BD%BD
- i####.####.com/images/mall/logo/1430901612651.jpg
- admin####.####.top/pic/queren.jpg
- admin####.####.top/index_files/TB221zuXMJlpuFjSspjXXcT.pXa_!!3016696958....
- i####.####.com/images/mall/logo/1330432650933.jpg
- admin####.####.top/js/TouchSlide.js
- i####.####.com/images/mall/logo/m_56ca7da740f9c.png
- i####.####.com/images/mall/logo/1385950369609.jpg
- m####.####.com/mall/
- admin####.####.top/pic/qian.jpg
- admin####.####.top/index_files/TB1JIicKpXXXXbPXXXXXXXXXXXX_!!0-item_pic....
- m####.####.com/css/style.css
- admin####.####.top/index_files/TB25npOb1rAQeBjSZFwXXa_RpXa_!!2634714441....
- admin####.####.top/index_files/h.js(5).%E4%B8%8B%E8%BD%BD
- i####.####.com/images/mall/det_bg.gif
- admin####.####.top/index_files/jquery.yiilistview.js.%E4%B8%8B%E8%BD%BD
- m####.####.com/img/goback.png
Modified file system:
Creates the following files:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/app_database/localstorage/http_admin1234.ftp21.host-ftp.top_0.localstorage-journal
- /data/data/####/cache/icons/WebpageIcons.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/app_database/localstorage/http_m.57zhe.com_0.localstorage-journal
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/databases/webview.db-journal
- /data/data/####/app_cache/ApplicationCache.db-journal
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Contains functionality to send SMS messages automatically.
