Adware.Ninebox.368

Technical information

Malicious functions:

Executes code of the following detected threats:

Adware.Ninebox.4.origin

Network activity:

Connects to:

UDP(DNS) <Google DNS>
TCP(HTTP/1.1) www.go####.com:80

DNS requests:

c.nin####.cn
s.nin####.cn
www.go####.com

HTTP GET requests:

www.go####.com/complete/search?hl=####&client=####&q=####

File system changes:

Creates the following files:

/data/data/####/1544035565990.jar
/data/data/####/1544035566059.dex (deleted)
/data/data/####/1544035566059.jar
/data/data/####/1544035566064.dex (deleted)
/data/data/####/1544035566064.jar
/data/data/####/1544035566335.jar
/data/data/####/1544035566392.jar
/data/data/####/1544035568446.jar
/data/data/####/1544035568475.jar
/data/data/####/1544035568518.jar
/data/data/####/1544035568538.jar (deleted)
/data/data/####/1544035569571.jar
/data/data/####/1544035569641.jar
/data/data/####/1544035569893.jar
/data/data/####/1544035569950.jar
/data/data/####/1544035569959.jar
/data/data/####/1544035570054.jar
/data/data/####/1544035572168.jar
/data/data/####/1544035572227.jar
/data/data/####/1544035572242.jar
/data/data/####/1544035572500.jar
/data/data/####/1544035572508.jar
/data/data/####/1544035572592.jar
/data/data/####/1544035575994.jar
/data/data/####/1544035575996.jar
/data/data/####/1544035576136.jar
/data/data/####/1544035576140.jar
/data/data/####/1544035576411.jar
/data/data/####/1544035579391.jar
/data/data/####/1544035579473.jar
/data/data/####/1544035579543.dex (deleted)
/data/data/####/1544035579543.jar
/data/data/####/1544035579779.jar
/data/data/####/1544035580033.jar
/data/data/####/1544035581433.jar
/data/data/####/1544035581501.jar
/data/data/####/1544035581523.jar
/data/data/####/1544035581718.jar
/data/data/####/1544035581831.jar
/data/data/####/1544035581934.jar
/data/data/####/1544035584729.jar
/data/data/####/1544035584810.jar
/data/data/####/1544035584841.jar
/data/data/####/1544035584847.jar
/data/data/####/1544035584922.jar
/data/data/####/1544035585208.jar
/data/data/####/1544035586557.jar
/data/data/####/1544035586609.jar
/data/data/####/1544035586611.jar
/data/data/####/1544035586651.jar
/data/data/####/1544035586881.jar
/data/data/####/1544035587160.jar
/data/data/####/1544035589225.jar
/data/data/####/1544035589350.jar
/data/data/####/1544035589479.jar
/data/data/####/1544035589502.jar
/data/data/####/1544035589585.jar
/data/data/####/1544035589920.jar
/data/data/####/1544035590933.jar
/data/data/####/1544035591065.jar
/data/data/####/1544035591066.jar
/data/data/####/1544035591124.jar
/data/data/####/1544035591337.jar
/data/data/####/1544035591561.jar
/data/data/####/1544035593921.jar
/data/data/####/1544035593936.jar
/data/data/####/1544035594035.jar
/data/data/####/1544035594070.jar
/data/data/####/1544035594155.jar
/data/data/####/1544035594680.jar
/data/data/####/1544035597252.jar
/data/data/####/1544035597376.jar
/data/data/####/1544035597381.jar
/data/data/####/1544035597383.jar
/data/data/####/1544035597488.jar
/data/data/####/1544035597923.jar
/data/data/####/1544035600154.jar
/data/data/####/1544035600159.jar
/data/data/####/1544035600367.jar
/data/data/####/1544035600377.jar
/data/data/####/1544035600398.jar
/data/data/####/1544035600613.jar
/data/data/####/1544035601919.jar
/data/data/####/1544035601937.jar
/data/data/####/1544035601974.jar
/data/data/####/1544035602007.jar
/data/data/####/1544035602236.jar
/data/data/####/1544035602454.jar
/data/data/####/1544035605419.jar
/data/data/####/1544035605504.jar
/data/data/####/1544035605585.jar
/data/data/####/1544035605609.jar
/data/data/####/1544035605854.jar
/data/data/####/1544035605957.jar
/data/data/####/1544035608941.jar
/data/data/####/1544035608948.jar
/data/data/####/1544035609056.jar
/data/data/####/1544035609188.jar
/data/data/####/1544035609200.jar
/data/data/####/1544035609412.jar
/data/data/####/1544035613627.jar
/data/data/####/1544035613681.jar
/data/data/####/1544035613721.jar
/data/data/####/1544035613821.jar
/data/data/####/1544035614135.jar
/data/data/####/1544035614244.jar
/data/data/####/1544035615667.jar
/data/data/####/1544035615740.jar
/data/data/####/1544035615806.jar
/data/data/####/1544035615807.jar
/data/data/####/1544035615826.jar
/data/data/####/1544035616075.jar
/data/data/####/1544035617621.jar
/data/data/####/1544035617633.jar
/data/data/####/1544035617720.jar
/data/data/####/1544035617729.jar
/data/data/####/1544035617884.jar
/data/data/####/1544035617974.jar
/data/data/####/1544035620029.jar
/data/data/####/1544035620069.jar
/data/data/####/1544035620162.jar
/data/data/####/1544035620210.jar
/data/data/####/1544035620295.jar
/data/data/####/1544035620452.jar
/data/data/####/1544035623025.jar
/data/data/####/1544035623049.jar
/data/data/####/1544035623176.jar
/data/data/####/1544035623212.jar
/data/data/####/1544035623276.jar
/data/data/####/1544035624707.jar
/data/data/####/1544035624914.jar
/data/data/####/1544035624916.jar
/data/data/####/1544035625014.jar
/data/data/####/1544035625084.jar
/data/data/####/1544035625254.jar
/data/data/####/1544035631194.jar
/data/data/####/1544035631344.jar
/data/data/####/1544035631529.jar
/data/data/####/1544035631973.jar
/data/data/####/1544035632168.jar
/data/data/####/LocationType.xml
/data/data/####/SIDEBAR_PRESENTS.xml
/data/data/####/box_cp_states.xml
/data/data/####/boxcpdownloads
/data/data/####/boxcpdownloads-journal
/data/data/####/dij.xml
/data/data/####/j-id.xml
/data/data/####/mid.xml
/data/data/####/running_app_name.xml
/data/data/####/type.xml
/data/data/####/xy.xml
/data/media/####/.nomedia
/data/media/####/1.dat
/data/media/####/12.dat
/data/media/####/MID.DAT
/data/media/####/names.dat
/data/media/####/share.dat
/data/media/####/st.dat

Miscellaneous:

Loads the following dynamic libraries:

main

Uses the following algorithms to encrypt data:

Uses the following algorithms to decrypt data:

Gets information about phone status (number, IMEI, etc.).

Gets information about installed apps.

Gets information about running apps.

Displays its own windows over windows of other apps.

技术

术语

教育培训

误区

Technical information

Curing recommendations

Free trial