Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.DownLoader.122.origin
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) cs2-wa####.8####.e####.net:80
- TCP(HTTP/1.1) plat####.twi####.com:80
- TCP(HTTP/1.1) www.face####.com:80
- TCP(HTTP/1.1) kairo####.jp:80
- TCP(HTTP/1.1) www.google-####.com:80
- TCP(HTTP/1.1) m####.l####.me.####.net:80
- TCP(TLS/1.0) plat####.twi####.com:443
- TCP(TLS/1.0) cdn.syndica####.t####.com:443
- TCP(TLS/1.0) cs2-wa####.8####.e####.net:443
- TCP(TLS/1.0) torim####.line-####.com:443
- TCP(TLS/1.0) m####.l####.me.####.net:443
- TCP(TLS/1.0) syndica####.twi####.com:443
- TCP(TLS/1.0) www.face####.com:443
- TCP(TLS/1.0) twi####.com:443
- TCP(TLS/1.0) c####.line-####.net.####.net:443
- TCP(TLS/1.0) mo####.twi####.com:443
- TCP(TLS/1.0) ssl.google-####.com:443
- TCP(TLS/1.0) st####.xx.f####.net:443
- TCP(TLS/1.0) ma.t####.com:443
DNS requests:
- a####.p####.com
- a####.p####.com
- abs.t####.com
- api.p####.com
- cdn.syndica####.t####.com
- d.line-####.net
- kairo####.jp
- m####.l####.me
- ma.t####.com
- mo####.twi####.com
- pbs.t####.com
- plat####.twi####.com
- social-####.l####.me
- ssl.google-####.com
- st####.xx.f####.net
- syndica####.twi####.com
- ton.t####.com
- torim####.line-####.com
- twi####.com
- www.face####.com
- www.google-####.com
HTTP GET requests:
- cs2-wa####.8####.e####.net/emoji/v2/72x72/1f47e.png
- kairo####.jp/android/?pid=####&from=####
- kairo####.jp/android/icon.ico
- kairo####.jp/android/image/dot.gif
- kairo####.jp/android/image/game/gm100_feature.png
- kairo####.jp/android/image/game/gm101_57.png
- kairo####.jp/android/image/game/gm103_57_lite.png
- kairo####.jp/android/image/game/gm106_feature.png
- kairo####.jp/android/image/game/gm107_feature.png
- kairo####.jp/android/image/game/gm109_192.png
- kairo####.jp/android/image/game/gm110_feature.png
- kairo####.jp/android/image/game/gm112_feature.png
- kairo####.jp/android/image/game/gm113_feature.png
- kairo####.jp/android/image/game/gm115_57_lite.png
- kairo####.jp/android/image/game/gm122_feature.png
- kairo####.jp/android/image/game/gm125_feature.png
- kairo####.jp/android/image/game/gm127_57_lite.png
- kairo####.jp/android/image/game/gm127_feature.png
- kairo####.jp/android/image/game/gm130_feature.png
- kairo####.jp/android/image/game/gm132_feature.png
- kairo####.jp/android/image/game/gm135_feature.png
- kairo####.jp/android/image/game/gm139_512.png
- kairo####.jp/android/image/game/gm19_57_lite.png
- kairo####.jp/android/image/game/gm20_feature.png
- kairo####.jp/android/image/game/gm24_feature.png
- kairo####.jp/android/image/game/gm25_57_lite.png
- kairo####.jp/android/image/game/gm25_feature.png
- kairo####.jp/android/image/game/gm29_57_lite.png
- kairo####.jp/android/image/game/gm30_57_lite.png
- kairo####.jp/android/image/game/gm37_57.png
- kairo####.jp/android/image/game/gm40_57_lite.png
- kairo####.jp/android/image/game/gm43_192.png
- kairo####.jp/android/image/game/gm43_57_lite.png
- kairo####.jp/android/image/game/gm46_57_lite.png
- kairo####.jp/android/image/game/gm49_57_lite.png
- kairo####.jp/android/image/game/gm52_57_lite.png
- kairo####.jp/android/image/game/gm55_57_lite.png
- kairo####.jp/android/image/game/gm58_57_lite.png
- kairo####.jp/android/image/game/gm64_57_lite.png
- kairo####.jp/android/image/game/gm67_57_lite.png
- kairo####.jp/android/image/game/gm70_57_lite.png
- kairo####.jp/android/image/game/gm73_57_lite.png
- kairo####.jp/android/image/game/gm76_57_lite.png
- kairo####.jp/android/image/game/gm82_57_lite.png
- kairo####.jp/android/image/game/gm85_feature.png
- kairo####.jp/android/image/game/gm8_57_lite.png
- kairo####.jp/android/image/game/gm90_57_lite.png
- kairo####.jp/android/image/game/gm92_feature.png
- kairo####.jp/android/image/game/gm93_feature.png
- kairo####.jp/android/image/game/gm94_57_lite.png
- kairo####.jp/android/image/game/gm9_512.png
- kairo####.jp/android/image/game/gm<SMS Address>_feature.png
- kairo####.jp/android/image/game/vis_g103.png
- kairo####.jp/android/image/game/vis_g109.png
- kairo####.jp/android/image/game/vis_g115.png
- kairo####.jp/android/image/game/vis_g116.png
- kairo####.jp/android/image/game/vis_g121.png
- kairo####.jp/android/image/game/vis_g13.png
- kairo####.jp/android/image/game/vis_g14.gif
- kairo####.jp/android/image/game/vis_g16.png
- kairo####.jp/android/image/game/vis_g19.gif
- kairo####.jp/android/image/game/vis_g29.gif
- kairo####.jp/android/image/game/vis_g30.gif
- kairo####.jp/android/image/game/vis_g40.gif
- kairo####.jp/android/image/game/vis_g43.png
- kairo####.jp/android/image/game/vis_g46.gif
- kairo####.jp/android/image/game/vis_g49.png
- kairo####.jp/android/image/game/vis_g52.gif
- kairo####.jp/android/image/game/vis_g55.gif
- kairo####.jp/android/image/game/vis_g58.png
- kairo####.jp/android/image/game/vis_g61.png
- kairo####.jp/android/image/game/vis_g64.png
- kairo####.jp/android/image/game/vis_g67.png
- kairo####.jp/android/image/game/vis_g70.png
- kairo####.jp/android/image/game/vis_g73.png
- kairo####.jp/android/image/game/vis_g76.png
- kairo####.jp/android/image/game/vis_g79.png
- kairo####.jp/android/image/game/vis_g8.gif
- kairo####.jp/android/image/game/vis_g82.png
- kairo####.jp/android/image/game/vis_g88.png
- kairo####.jp/android/image/game/vis_g91.png
- kairo####.jp/android/image/game/vis_g94.png
- kairo####.jp/android/image/game/vis_g97.png
- kairo####.jp/android/image/game/vis_g99.png
- kairo####.jp/android/image/top/FAQ_button2.png
- kairo####.jp/android/image/top/all_bg00.png
- kairo####.jp/android/image/top/all_bg01.png
- kairo####.jp/android/image/top/all_bg01_b.png
- kairo####.jp/android/image/top/applekairo00.png
- kairo####.jp/android/image/top/barbottom3.gif
- kairo####.jp/android/image/top/barsupport2.gif
- kairo####.jp/android/image/top/bg_wallpaper.png
- kairo####.jp/android/image/top/freecontents2.gif
- kairo####.jp/android/image/top/kaironews2.gif
- kairo####.jp/android/image/top/line0.gif
- kairo####.jp/android/image/top/osusume3.png
- kairo####.jp/android/image/top/spring/Top_in_Image_jp.png
- kairo####.jp/android/image/top/spring/all_bg02.png
- kairo####.jp/android/image/top/spring/chara_00.gif
- kairo####.jp/image/kairomail/kairo2.gif
- kairo####.jp/image/kairomail/tori.gif
- kairo####.jp/image/menubutton.png
- kairo####.jp/image/softy/banner_daiboshuu.png
- m####.l####.me.####.net/js/line-button.js?v=####
- plat####.twi####.com/widgets.js
- www.face####.com/plugins/like.php?href=http://kairopark.jp/android/?from...
- www.google-####.com/ga.js
- www.google-####.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=356276218&utmhn=...
Modified file system:
Creates the following files:
- /data/data/####/0000
- /data/data/####/0001
- /data/data/####/0002
- /data/data/####/classes.jar
- /data/data/####/dbMrdh-journal
- /data/data/####/webview.db-journal
Miscellaneous:
Gains access to telephone information (number, imei, etc.).
Gains access to information about running applications.
Displays its own windows over windows of other applications.
