Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Packed.57066

Added to the Dr.Web virus database: 2022-10-11

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Packed.54935
File system changes:
Creates the following files:
  • /data/data/####/.fsgkea
  • /data/data/####/.jg.ri
  • /data/data/####/.jg.store.report_cf
  • /data/data/####/.jg.store.report_pid
  • /data/data/####/0CAAWlEW9sJ3XvgHIxqPgXxpR6f71vuN.dex
  • /data/data/####/0CAAWlEW9sJ3XvgHIxqPgXxpR6f71vuN.dex.flock (deleted)
  • /data/data/####/0D6sglk6gkVeFwRuZRVhebFDICL1Jw3Z.dex
  • /data/data/####/0D6sglk6gkVeFwRuZRVhebFDICL1Jw3Z.dex.flock (deleted)
  • /data/data/####/0S1zEkb8BLKNvSDxYMVz3DAbLKAV6xs7.dex
  • /data/data/####/0S1zEkb8BLKNvSDxYMVz3DAbLKAV6xs7.dex.flock (deleted)
  • /data/data/####/0mkwsGEE5gS6n1SnZVjyobDrnZ2sf1LT.dex
  • /data/data/####/0mkwsGEE5gS6n1SnZVjyobDrnZ2sf1LT.dex.flock (deleted)
  • /data/data/####/0tly4r1huOfB2GC0u2DTmZazDOFC94Xa.dex
  • /data/data/####/0tly4r1huOfB2GC0u2DTmZazDOFC94Xa.dex.flock (deleted)
  • /data/data/####/2C6vTGqHcLrS2DpquyICuE4Ey8broLeP.dex
  • /data/data/####/2C6vTGqHcLrS2DpquyICuE4Ey8broLeP.dex.flock (deleted)
  • /data/data/####/2EgwpGTGT5cZnKr0O7H5TdKKAtcwXjfE.dex
  • /data/data/####/2EgwpGTGT5cZnKr0O7H5TdKKAtcwXjfE.dex.flock (deleted)
  • /data/data/####/2VpUxDRb8HGG8XQB8RtQA936aSfHcst9.dex
  • /data/data/####/2VpUxDRb8HGG8XQB8RtQA936aSfHcst9.dex.flock (deleted)
  • /data/data/####/2kRgEJL0Bqp8tU0eOw2Rlw0tLcImTETV.dex
  • /data/data/####/2kRgEJL0Bqp8tU0eOw2Rlw0tLcImTETV.dex.flock (deleted)
  • /data/data/####/2sDbPgzgeUcxZIJdJifrqYiMKKZ00djJ.dex
  • /data/data/####/2sDbPgzgeUcxZIJdJifrqYiMKKZ00djJ.dex.flock (deleted)
  • /data/data/####/3d73XnLFZ5g9Z51Mm7qTGCpnEVHwKMwp.dex
  • /data/data/####/3tu2DtDF0mvCamethKFb9LCx5mnK9gU0.dex
  • /data/data/####/3tu2DtDF0mvCamethKFb9LCx5mnK9gU0.dex.flock (deleted)
  • /data/data/####/4DisStQlmWLwOCT9l2bAdsxTt0YzVmeE.dex
  • /data/data/####/4DisStQlmWLwOCT9l2bAdsxTt0YzVmeE.dex.flock (deleted)
  • /data/data/####/4OksgVowcNza3XRKZ7yw0VVcg4xwOYty.dex
  • /data/data/####/4OksgVowcNza3XRKZ7yw0VVcg4xwOYty.dex.flock (deleted)
  • /data/data/####/4exVMEhgYQjWK4ZXVterzYYoGt5EbGNC.dex
  • /data/data/####/4exVMEhgYQjWK4ZXVterzYYoGt5EbGNC.dex.flock (deleted)
  • /data/data/####/4hn4oSFWxdw6g9670g0qMUupc0SLJE7O.dex
  • /data/data/####/4hn4oSFWxdw6g9670g0qMUupc0SLJE7O.dex.flock (deleted)
  • /data/data/####/4lLisELPoqJVxWB7eRGa8pbwndzQSEPw.dex
  • /data/data/####/4lLisELPoqJVxWB7eRGa8pbwndzQSEPw.dex.flock (deleted)
  • /data/data/####/4nAAVlZJXrHbGVtA8NQBY6x4ybIVISfq.dex
  • /data/data/####/4nAAVlZJXrHbGVtA8NQBY6x4ybIVISfq.dex.flock (deleted)
  • /data/data/####/4t0pje1LHxgPFdnKyswg617Pm3lOqKh5.dex
  • /data/data/####/4t0pje1LHxgPFdnKyswg617Pm3lOqKh5.dex.flock (deleted)
  • /data/data/####/55XCiWzC026K8YQLduZMo6hwoPIRNvdY.dex
  • /data/data/####/55XCiWzC026K8YQLduZMo6hwoPIRNvdY.dex.flock (deleted)
  • /data/data/####/5gLgY7j4sy6bc6t509nAiUSYvQvFiR76.dex
  • /data/data/####/5gLgY7j4sy6bc6t509nAiUSYvQvFiR76.dex.flock (deleted)
  • /data/data/####/5tuh8vwb9fFFyoe2kazHdwRtgv6Ju7Ae.dex
  • /data/data/####/5vp9DcIEdkoLiiBwFA00AeCJsbqPReeQ.dex
  • /data/data/####/5vp9DcIEdkoLiiBwFA00AeCJsbqPReeQ.dex.flock (deleted)
  • /data/data/####/6QE5hAfLpDWhaJVzDbsKwFYqOmV7TxDx.dex
  • /data/data/####/6QE5hAfLpDWhaJVzDbsKwFYqOmV7TxDx.dex.flock (deleted)
  • /data/data/####/6x8JKgnthT5FOJmFbZVVae4Out5BJFc8.dex
  • /data/data/####/6x8JKgnthT5FOJmFbZVVae4Out5BJFc8.dex.flock (deleted)
  • /data/data/####/7PeN6obko620kTeK91eSnUr6oddCbXh3.dex
  • /data/data/####/7YF74GhpMSKfDC7IgkRQCcVNpYjOsYk5.dex
  • /data/data/####/7YF74GhpMSKfDC7IgkRQCcVNpYjOsYk5.dex.flock (deleted)
  • /data/data/####/7ibpVMplcIW8D9U3LfyBpidTez7GmJE3.dex
  • /data/data/####/7ibpVMplcIW8D9U3LfyBpidTez7GmJE3.dex.flock (deleted)
  • /data/data/####/7j1SlaGEX0p8WwFxx9csYicAFbVqNzi1.dex
  • /data/data/####/7j1SlaGEX0p8WwFxx9csYicAFbVqNzi1.dex.flock (deleted)
  • /data/data/####/7mPqLnJBq48AUmCb6FB4xfmF4ZAMTSqc.dex
  • /data/data/####/8BafOI6eGJpzbLbGuQFea06vjCpzaX5r.dex
  • /data/data/####/8nf7UJBGRbVrc6zEC1aHnV8rqYnRtj9u.dex
  • /data/data/####/8nf7UJBGRbVrc6zEC1aHnV8rqYnRtj9u.dex.flock (deleted)
  • /data/data/####/8tiKd48AylYlkuXUSUo4sKZaQjhoMvil.dex
  • /data/data/####/8tiKd48AylYlkuXUSUo4sKZaQjhoMvil.dex.flock (deleted)
  • /data/data/####/8ySCjiCIZoxTn0nQARufh3LB41vSjeKX.dex
  • /data/data/####/8ySCjiCIZoxTn0nQARufh3LB41vSjeKX.dex.flock (deleted)
  • /data/data/####/8zDSDMAsYCSUi7qNL1gQPaavk2pAIkh7.dex
  • /data/data/####/8zDSDMAsYCSUi7qNL1gQPaavk2pAIkh7.dex.flock (deleted)
  • /data/data/####/9hFcHUYoVOT6vV8XDUvz0cJaqp8cO15n.dex
  • /data/data/####/9hFcHUYoVOT6vV8XDUvz0cJaqp8cO15n.dex.flock (deleted)
  • /data/data/####/9ynLKGvXHY8R7XXyp4klNNQlf9INCiO0.dex
  • /data/data/####/9ynLKGvXHY8R7XXyp4klNNQlf9INCiO0.dex.flock (deleted)
  • /data/data/####/AR0oC8rEsKpkis393tTJlf8ZUc2uGja3.dex
  • /data/data/####/AR0oC8rEsKpkis393tTJlf8ZUc2uGja3.dex.flock (deleted)
  • /data/data/####/AouAze4Sfn7e858k6xNaJSZsXWRfuCOD.dex
  • /data/data/####/AouAze4Sfn7e858k6xNaJSZsXWRfuCOD.dex.flock (deleted)
  • /data/data/####/BIfldg660vYEKyKSBgo9uNIKk2xF8Yr2.dex
  • /data/data/####/BIfldg660vYEKyKSBgo9uNIKk2xF8Yr2.dex.flock (deleted)
  • /data/data/####/Bn2gStJvz85ICxfWx9zP0Xfyz0zNUMUF.dex
  • /data/data/####/Bn2gStJvz85ICxfWx9zP0Xfyz0zNUMUF.dex.flock (deleted)
  • /data/data/####/Bt51eTthGmM9AHm9r8uKUg5KoypNGnuX.dex
  • /data/data/####/BxKvUZMmxI9LPaQFotu88LAUcsGF7BKK.dex
  • /data/data/####/BxKvUZMmxI9LPaQFotu88LAUcsGF7BKK.dex.flock (deleted)
  • /data/data/####/C4hAwGOXJb19MnApMeWXElvCAdXzhefx.dex
  • /data/data/####/C4hAwGOXJb19MnApMeWXElvCAdXzhefx.dex.flock (deleted)
  • /data/data/####/CBI5NHNqP4YZMfsKL0oUhQUu3iKmcgJP.dex
  • /data/data/####/CFvTH7YM2ZdlqNjA53xywzTKzxsTqVWJ.dex
  • /data/data/####/CFvTH7YM2ZdlqNjA53xywzTKzxsTqVWJ.dex.flock (deleted)
  • /data/data/####/CVc3avtWwxzuwzTTcOZIp7m04DcPnOVZ.dex
  • /data/data/####/CVc3avtWwxzuwzTTcOZIp7m04DcPnOVZ.dex.flock (deleted)
  • /data/data/####/DEpHeJVN1h7VGL4jI3vXAEz82Rf7iSPm.dex
  • /data/data/####/DEpHeJVN1h7VGL4jI3vXAEz82Rf7iSPm.dex.flock (deleted)
  • /data/data/####/DU3FX1oArWo6RAZqMVCRIGIRdtJyaXgG.dex
  • /data/data/####/DuclXbheBQzvrYKN183L3ICKZnwlgQ7Q.dex
  • /data/data/####/DuclXbheBQzvrYKN183L3ICKZnwlgQ7Q.dex.flock (deleted)
  • /data/data/####/DyaabaCjrHBoYZhA8HAGwPOmKGwKk3OU.dex
  • /data/data/####/DyaabaCjrHBoYZhA8HAGwPOmKGwKk3OU.dex.flock (deleted)
  • /data/data/####/E1fkExpJCBwkZj17lOO0IDgEiEvcUV4C.dex
  • /data/data/####/E1fkExpJCBwkZj17lOO0IDgEiEvcUV4C.dex.flock (deleted)
  • /data/data/####/E2UW9k7zz2qLl5kQnIyLkqpWoeJOYy7v.dex
  • /data/data/####/ER7ETEiIhUJhVIBUzAKM8ud2cJ3796d4.dex
  • /data/data/####/ER7ETEiIhUJhVIBUzAKM8ud2cJ3796d4.dex.flock (deleted)
  • /data/data/####/EXsmu5oZyrURx1uE9nuQqsAV6XkBHbSj.dex
  • /data/data/####/EXsmu5oZyrURx1uE9nuQqsAV6XkBHbSj.dex.flock (deleted)
  • /data/data/####/Fs76M7rsfSkgzTNe1QozHvQjp6GqcKnA.dex
  • /data/data/####/Fs76M7rsfSkgzTNe1QozHvQjp6GqcKnA.dex.flock (deleted)
  • /data/data/####/G6kfg02slfLaxvs9dg9e3NLc6bXKteH8.dex
  • /data/data/####/G6kfg02slfLaxvs9dg9e3NLc6bXKteH8.dex.flock (deleted)
  • /data/data/####/G9HHonspQt1TwoJ1451OgfJSQ59yzG4D.dex
  • /data/data/####/G9HHonspQt1TwoJ1451OgfJSQ59yzG4D.dex.flock (deleted)
  • /data/data/####/GJ0qapoP5dXF3MWLhuGVCsuYZG7FXXCh.dex
  • /data/data/####/GJ0qapoP5dXF3MWLhuGVCsuYZG7FXXCh.dex.flock (deleted)
  • /data/data/####/GTQTKpWViqZSwmHDoElm5ysRTHLoGxMM.dex
  • /data/data/####/GTQTKpWViqZSwmHDoElm5ysRTHLoGxMM.dex.flock (deleted)
  • /data/data/####/GrA47uxRztnOLCEiOKAGKjfaIa3Hzuht.dex
  • /data/data/####/GrA47uxRztnOLCEiOKAGKjfaIa3Hzuht.dex.flock (deleted)
  • /data/data/####/H9IVb245M5o1wxgtX5fegFrDiUOnm2uP.dex
  • /data/data/####/H9IVb245M5o1wxgtX5fegFrDiUOnm2uP.dex.flock (deleted)
  • /data/data/####/HA0TU9HQumdW1j5jTnuSOJeE1iOMsBVJ.dex
  • /data/data/####/HA0TU9HQumdW1j5jTnuSOJeE1iOMsBVJ.dex.flock (deleted)
  • /data/data/####/ICU4gYZniCO5gmLpQ8EsSETZ4A1W21Aq.dex
  • /data/data/####/ICU4gYZniCO5gmLpQ8EsSETZ4A1W21Aq.dex.flock (deleted)
  • /data/data/####/IOjn8M4K8UWRZ6DzIVQPFrlQTRPBpNfz.dex
  • /data/data/####/IOjn8M4K8UWRZ6DzIVQPFrlQTRPBpNfz.dex.flock (deleted)
  • /data/data/####/IjQrC03atRciGXpEcOG5S7LKqOxsFKKc.dex
  • /data/data/####/IjQrC03atRciGXpEcOG5S7LKqOxsFKKc.dex.flock (deleted)
  • /data/data/####/Jaeb4wBUkJo3maaTXQxx3ENlqvM7SZk5.dex
  • /data/data/####/Jaeb4wBUkJo3maaTXQxx3ENlqvM7SZk5.dex.flock (deleted)
  • /data/data/####/JdnxrjLU4pyvhvl3Yxa1yxKlqVLYQhnH.dex
  • /data/data/####/JdnxrjLU4pyvhvl3Yxa1yxKlqVLYQhnH.dex.flock (deleted)
  • /data/data/####/Jo8rYPm9uxKaLIaJvwmt8r2mbMiWyBQA.dex
  • /data/data/####/Jo8rYPm9uxKaLIaJvwmt8r2mbMiWyBQA.dex.flock (deleted)
  • /data/data/####/KQ8DW6wcl5ercUfLULptobXOy23b3doH.dex
  • /data/data/####/KQ8DW6wcl5ercUfLULptobXOy23b3doH.dex.flock (deleted)
  • /data/data/####/LR2xRp1iYPmeErwoqyAcgqUY9KctCB9m.dex
  • /data/data/####/LR2xRp1iYPmeErwoqyAcgqUY9KctCB9m.dex.flock (deleted)
  • /data/data/####/MEvOiBQxAfpKOrkmzhod6Gt2OIOboFOO.dex
  • /data/data/####/MEvOiBQxAfpKOrkmzhod6Gt2OIOboFOO.dex.flock (deleted)
  • /data/data/####/MQiPWZNBNZhSe7ESytkrLBnbXcZ6XLdd.dex
  • /data/data/####/MQiPWZNBNZhSe7ESytkrLBnbXcZ6XLdd.dex.flock (deleted)
  • /data/data/####/MoVW42pwu2Xs9Vo4o2r6kJOp9kroofGu.dex
  • /data/data/####/MoVW42pwu2Xs9Vo4o2r6kJOp9kroofGu.dex.flock (deleted)
  • /data/data/####/NTw51l1juslMJu6tocvovogIVrgNcfan.dex
  • /data/data/####/NTw51l1juslMJu6tocvovogIVrgNcfan.dex.flock (deleted)
  • /data/data/####/NiPREOu0aLWFfEk3fq6SoME3l40kZpdo.dex
  • /data/data/####/NqUNQ6YOPtsRcCPFnF6PZ4mkspIcGrGc.dex
  • /data/data/####/NqUNQ6YOPtsRcCPFnF6PZ4mkspIcGrGc.dex.flock (deleted)
  • /data/data/####/O3w3dXDQ0EUltW2GFCQAaROFAap6ZKg1.dex
  • /data/data/####/O3w3dXDQ0EUltW2GFCQAaROFAap6ZKg1.dex.flock (deleted)
  • /data/data/####/OIobWtOUL9PvPmhUL7Y93o65YiYbyWB9.dex
  • /data/data/####/OIobWtOUL9PvPmhUL7Y93o65YiYbyWB9.dex.flock (deleted)
  • /data/data/####/OlgBOimJMHYWLvW5Pw6BhJHuj2s2fxQn.dex
  • /data/data/####/OlgFMfU96ZdY1nXPmFQgOHZawdMNMRcz.dex
  • /data/data/####/OlgFMfU96ZdY1nXPmFQgOHZawdMNMRcz.dex.flock (deleted)
  • /data/data/####/OxDSU8COt6wfCDN8q2ia8cj7rDUuHdAb.dex
  • /data/data/####/OxDSU8COt6wfCDN8q2ia8cj7rDUuHdAb.dex.flock (deleted)
  • /data/data/####/PI1YgkDgPRsqGQLdrkYeHfzvQ7PRPgPd.dex
  • /data/data/####/PI1YgkDgPRsqGQLdrkYeHfzvQ7PRPgPd.dex.flock (deleted)
  • /data/data/####/PxMQKGTSS58q3dAl3AR2M8cfho73ZTe3.dex
  • /data/data/####/PxMQKGTSS58q3dAl3AR2M8cfho73ZTe3.dex.flock (deleted)
  • /data/data/####/QL8C1Mlc3QkqntZi5R2Dfejwhmu0UV6V.dex
  • /data/data/####/QL8C1Mlc3QkqntZi5R2Dfejwhmu0UV6V.dex.flock (deleted)
  • /data/data/####/R9RqCD5PQhjci7Xh9A8jvOjX3Vy0xs3U.dex
  • /data/data/####/R9RqCD5PQhjci7Xh9A8jvOjX3Vy0xs3U.dex.flock (deleted)
  • /data/data/####/RFEnLHA3LPi8wkzH14H7xrRO52Lc3JeV.dex
  • /data/data/####/RFEnLHA3LPi8wkzH14H7xrRO52Lc3JeV.dex.flock (deleted)
  • /data/data/####/Rf87Z2JQBKynWJUyAFfCE6jgkA2Lwa0H.dex
  • /data/data/####/RnzLgqCh7TowF9Pef8sUVM0Op0vCjqzA.dex
  • /data/data/####/RnzLgqCh7TowF9Pef8sUVM0Op0vCjqzA.dex.flock (deleted)
  • /data/data/####/SaPAO8EWRWM71ou7WBgOULsPFmWNRPiW.dex
  • /data/data/####/SaPAO8EWRWM71ou7WBgOULsPFmWNRPiW.dex.flock (deleted)
  • /data/data/####/SfPT6AWAWZnoYrJvu2yppx0cyNIpjhcx.dex
  • /data/data/####/SfPT6AWAWZnoYrJvu2yppx0cyNIpjhcx.dex.flock (deleted)
  • /data/data/####/T1b7oEBdT05byi4XBC5kAjUqWTCCdqxI.dex
  • /data/data/####/T1b7oEBdT05byi4XBC5kAjUqWTCCdqxI.dex.flock (deleted)
  • /data/data/####/T3P2hOGtmPSdzO8gnIWZwJROfol3Xgdb.dex
  • /data/data/####/T3P2hOGtmPSdzO8gnIWZwJROfol3Xgdb.dex.flock (deleted)
  • /data/data/####/TyUbwmD5LJbC14mtq8F2UGOsYN09hv3P.dex
  • /data/data/####/TyUbwmD5LJbC14mtq8F2UGOsYN09hv3P.dex.flock (deleted)
  • /data/data/####/U7dQDwG7c70gwskhMn9x5m6XlIbfZZY4.dex
  • /data/data/####/U7dQDwG7c70gwskhMn9x5m6XlIbfZZY4.dex.flock (deleted)
  • /data/data/####/UJN0DkQWmcLOsCNGilomPMMNmKHTSk7j.dex
  • /data/data/####/UJN0DkQWmcLOsCNGilomPMMNmKHTSk7j.dex.flock (deleted)
  • /data/data/####/UPQtL4iv0dmks1iitWjRdbpSf9AkI009.dex
  • /data/data/####/UPQtL4iv0dmks1iitWjRdbpSf9AkI009.dex.flock (deleted)
  • /data/data/####/V7sbnp8WHQLxvAxssJqKGtIaS9V4lWvo.dex
  • /data/data/####/V7sbnp8WHQLxvAxssJqKGtIaS9V4lWvo.dex.flock (deleted)
  • /data/data/####/VjCM53kmiCFG1JSv90lwa8dhqrvpiT64.dex
  • /data/data/####/VjCM53kmiCFG1JSv90lwa8dhqrvpiT64.dex.flock (deleted)
  • /data/data/####/W1tF2Hf4DDN4ZMlXvHzdH37FdSr2NyIE.dex
  • /data/data/####/W1tF2Hf4DDN4ZMlXvHzdH37FdSr2NyIE.dex.flock (deleted)
  • /data/data/####/WFm66yznT8oSqV2OcktKBYp1E7f4Si3V.dex
  • /data/data/####/WFm66yznT8oSqV2OcktKBYp1E7f4Si3V.dex.flock (deleted)
  • /data/data/####/WHfa2EaL1wm0qm5gOvvol8KdJY2KnbDK.dex
  • /data/data/####/WHfa2EaL1wm0qm5gOvvol8KdJY2KnbDK.dex.flock (deleted)
  • /data/data/####/WVASFMkZzNvFacD07HtACwJeI3vWBJYt.dex
  • /data/data/####/WVASFMkZzNvFacD07HtACwJeI3vWBJYt.dex.flock (deleted)
  • /data/data/####/WZ6quaDwkHMzEtAGRDgvtyOHCcA7azBr.dex
  • /data/data/####/WZ6quaDwkHMzEtAGRDgvtyOHCcA7azBr.dex.flock (deleted)
  • /data/data/####/WeMq3UVK3pkdPbZBCFn9DlY9J2Yc6ERA.dex
  • /data/data/####/WeMq3UVK3pkdPbZBCFn9DlY9J2Yc6ERA.dex.flock (deleted)
  • /data/data/####/WhrO56zP5TsQWLb95UPNxfBwQ3xDbH9K.dex
  • /data/data/####/WhrO56zP5TsQWLb95UPNxfBwQ3xDbH9K.dex.flock (deleted)
  • /data/data/####/WqJz7VKoAaI9QiVipxmKFOGM513qrdYq.dex
  • /data/data/####/WqJz7VKoAaI9QiVipxmKFOGM513qrdYq.dex.flock (deleted)
  • /data/data/####/WsPGppp1KptlqCFNn4gweBeT4zOh1esO.dex
  • /data/data/####/WyCZUlRCl6Fta4OwnCBluv5QVjScxVBe.dex
  • /data/data/####/WyCZUlRCl6Fta4OwnCBluv5QVjScxVBe.dex.flock (deleted)
  • /data/data/####/XGKEhBJp2Tzkh9UjLn8jlFwQhxw0Q8eR.dex
  • /data/data/####/Xor1VHXgdVetSOSfAW86x22P8JdVbOyq.dex
  • /data/data/####/Xor1VHXgdVetSOSfAW86x22P8JdVbOyq.dex.flock (deleted)
  • /data/data/####/YQMDqsDjwCY7FZoYDOMqwFik98OXJXDW.dex
  • /data/data/####/YQMDqsDjwCY7FZoYDOMqwFik98OXJXDW.dex.flock (deleted)
  • /data/data/####/Yqim56gksx4u9Hr5ZXV8VagqBAuVIGae.dex
  • /data/data/####/Yqim56gksx4u9Hr5ZXV8VagqBAuVIGae.dex.flock (deleted)
  • /data/data/####/ZEC9ysHck7ettYhCakslJEwQXaQZWugW.dex
  • /data/data/####/ZFPwf0DuNAMoK0vGQb0AmCMymeIoeLSQ.dex
  • /data/data/####/ZFPwf0DuNAMoK0vGQb0AmCMymeIoeLSQ.dex.flock (deleted)
  • /data/data/####/Zgt0RYRJ351pFEu46Z80gazVzFT6zcyi.dex
  • /data/data/####/aOck4JfWyzlHLkEgFc2nhz3p1B502ciK.dex
  • /data/data/####/aU6OuW32yVhwpTXsnaxDxnXTHX1HVWBc.dex
  • /data/data/####/aU6OuW32yVhwpTXsnaxDxnXTHX1HVWBc.dex.flock (deleted)
  • /data/data/####/akwJvb0bacnwNoARm8oPKkLnCbO4dSq3.dex
  • /data/data/####/akwJvb0bacnwNoARm8oPKkLnCbO4dSq3.dex.flock (deleted)
  • /data/data/####/aqngvLVz6boh8wlRbUwgWkgmJRZrSSPY.dex
  • /data/data/####/b76D1H3MWzFcCrW6BRmMyqQySgxdMVG4.dex
  • /data/data/####/b76D1H3MWzFcCrW6BRmMyqQySgxdMVG4.dex.flock (deleted)
  • /data/data/####/bbqWnjyECyMwiOBaaZ9SbQLONq1NZHfn.dex
  • /data/data/####/bbqWnjyECyMwiOBaaZ9SbQLONq1NZHfn.dex.flock (deleted)
  • /data/data/####/bcUAo9MQwbtZAigp7S9yGG4ig1ryhi9K.dex
  • /data/data/####/bhGEd2rce1WapmKxaGV536bVy2LVtRqs.dex
  • /data/data/####/bmJFnzYIr7HtFhXmsa7AKPrEY8cFd5Ee.dex
  • /data/data/####/bmJFnzYIr7HtFhXmsa7AKPrEY8cFd5Ee.dex.flock (deleted)
  • /data/data/####/cb6jQ3NKTGLeH40FPUyW5xF3a6aPK9BQ.dex
  • /data/data/####/cb6jQ3NKTGLeH40FPUyW5xF3a6aPK9BQ.dex.flock (deleted)
  • /data/data/####/ciQLUJu8xpg1eU1qVmqSJo1d6D1RNyRm.dex
  • /data/data/####/ciQLUJu8xpg1eU1qVmqSJo1d6D1RNyRm.dex.flock (deleted)
  • /data/data/####/cjtgnzCj0ztVEY7JGzYGBex46CaOM64Z.dex
  • /data/data/####/cjtgnzCj0ztVEY7JGzYGBex46CaOM64Z.dex.flock (deleted)
  • /data/data/####/classes.dex
  • /data/data/####/classes.dex;classes2.dex
  • /data/data/####/ctd5nSWFe5UIrQ8JadblCm8gTVKN8v24.dex
  • /data/data/####/ctd5nSWFe5UIrQ8JadblCm8gTVKN8v24.dex.flock (deleted)
  • /data/data/####/e6gZLuoxNcplZ3Df2DCOmgzzoNH4hssP.dex
  • /data/data/####/e6gZLuoxNcplZ3Df2DCOmgzzoNH4hssP.dex.flock (deleted)
  • /data/data/####/eh6xlMSi8Hs5Kor0iUCJ50fPswwO75Vd.dex
  • /data/data/####/eh6xlMSi8Hs5Kor0iUCJ50fPswwO75Vd.dex.flock (deleted)
  • /data/data/####/f8ywb4ndj5E3OZGDQfIX1xxT6LVuOjwZ.dex
  • /data/data/####/f8ywb4ndj5E3OZGDQfIX1xxT6LVuOjwZ.dex.flock (deleted)
  • /data/data/####/feejP5vFiG76N3ct6g7wR0Y7mawNCgF1.dex
  • /data/data/####/feejP5vFiG76N3ct6g7wR0Y7mawNCgF1.dex.flock (deleted)
  • /data/data/####/g0Jbdg49XoQC0A4OM9xElsaphJwqh0G0.dex
  • /data/data/####/g0Jbdg49XoQC0A4OM9xElsaphJwqh0G0.dex.flock (deleted)
  • /data/data/####/gNfNwOMIvbHWgQfe2zQPNrnjNoz4czkS.dex
  • /data/data/####/gNfNwOMIvbHWgQfe2zQPNrnjNoz4czkS.dex.flock (deleted)
  • /data/data/####/hXEVmfvve6iYxw8FCWp1coaHf2ZCOJKW.dex
  • /data/data/####/hXEVmfvve6iYxw8FCWp1coaHf2ZCOJKW.dex.flock (deleted)
  • /data/data/####/hbPt0exH6PCVBU1wPizJuBqCRpmCDCr6.dex
  • /data/data/####/hbPt0exH6PCVBU1wPizJuBqCRpmCDCr6.dex.flock (deleted)
  • /data/data/####/hhHwkbIsiDg5Etw2qMoeLz1YGCk6G6bI.dex
  • /data/data/####/hhHwkbIsiDg5Etw2qMoeLz1YGCk6G6bI.dex.flock (deleted)
  • /data/data/####/i2GKOro7gmviqijwsXlXnKe7wxYLXDys.dex
  • /data/data/####/i2GKOro7gmviqijwsXlXnKe7wxYLXDys.dex.flock (deleted)
  • /data/data/####/iIpeaGsUKTki7cw4Dlw6xeqHKz3CJqzl.dex
  • /data/data/####/iIpeaGsUKTki7cw4Dlw6xeqHKz3CJqzl.dex.flock (deleted)
  • /data/data/####/iKCUS4UbyfKBXmoWS22P48h0lfb1jJO5.dex
  • /data/data/####/iw8hw9S98bwg13bFOUmf5J3QiURxu49C.dex
  • /data/data/####/j09EP5uq6JQ1pMsgsDQyBKJ8iDGJAoT4.dex
  • /data/data/####/jM5jHtA4CLCkoZkJnWCPT17GH1YZdnxs.dex
  • /data/data/####/jM5jHtA4CLCkoZkJnWCPT17GH1YZdnxs.dex.flock (deleted)
  • /data/data/####/jR9qPOcO44vNV7y7uHj9oWRYWb5ZMxsF.dex
  • /data/data/####/jR9qPOcO44vNV7y7uHj9oWRYWb5ZMxsF.dex.flock (deleted)
  • /data/data/####/jhsNKw1ACb9BMidqEVxiMOcSM1djEXbU.dex
  • /data/data/####/jhsNKw1ACb9BMidqEVxiMOcSM1djEXbU.dex.flock (deleted)
  • /data/data/####/jjbe4hgwFYFQXL4NDJ5bwu08ajcOCXOy.dex
  • /data/data/####/jjbe4hgwFYFQXL4NDJ5bwu08ajcOCXOy.dex.flock (deleted)
  • /data/data/####/jkPynPyvXw1azKckaTDD6ZVfQ9NjXtxM.dex
  • /data/data/####/jkPynPyvXw1azKckaTDD6ZVfQ9NjXtxM.dex.flock (deleted)
  • /data/data/####/juJtB4Bgcz77P3Md1NA2rYuNpTjvksjm.dex
  • /data/data/####/juJtB4Bgcz77P3Md1NA2rYuNpTjvksjm.dex.flock (deleted)
  • /data/data/####/kc3UKVwKvM8qd1bgU8X39uzMgIRXubal.dex
  • /data/data/####/kc3UKVwKvM8qd1bgU8X39uzMgIRXubal.dex.flock (deleted)
  • /data/data/####/kmUnkdFvVQmyYId4sqNyRIYfJQXSmsUZ.dex
  • /data/data/####/kmUnkdFvVQmyYId4sqNyRIYfJQXSmsUZ.dex.flock (deleted)
  • /data/data/####/kmwCDecR8Pk9OVTb0dkGHza4ebGOWnLc.dex
  • /data/data/####/kmwCDecR8Pk9OVTb0dkGHza4ebGOWnLc.dex.flock (deleted)
  • /data/data/####/lPXoWboRwsUMAIMbCTNdmOURqMsgRMR0.dex
  • /data/data/####/lPXoWboRwsUMAIMbCTNdmOURqMsgRMR0.dex.flock (deleted)
  • /data/data/####/lhtTU017hwrdneYwxsnE4TqPnSHovHJs.dex
  • /data/data/####/lhtTU017hwrdneYwxsnE4TqPnSHovHJs.dex.flock (deleted)
  • /data/data/####/libjiagu.so
  • /data/data/####/m9auFoEY5LmgiwuUX95af9MRDANansLN.dex
  • /data/data/####/m9auFoEY5LmgiwuUX95af9MRDANansLN.dex.flock (deleted)
  • /data/data/####/mKezhASb2UP3qxB6NguNKXF0dEr6UmQr.dex
  • /data/data/####/mKezhASb2UP3qxB6NguNKXF0dEr6UmQr.dex.flock (deleted)
  • /data/data/####/mV24N1fzKIWhDxFbAgi9x3r6JupmqV0h.dex
  • /data/data/####/mV24N1fzKIWhDxFbAgi9x3r6JupmqV0h.dex.flock (deleted)
  • /data/data/####/nR8TAI5xuaGMP8WwEDWaJ4dMUHcf7YzQ.dex
  • /data/data/####/nR8TAI5xuaGMP8WwEDWaJ4dMUHcf7YzQ.dex.flock (deleted)
  • /data/data/####/nbiIyZAiyK2xFPAGoLvVKuPpLfE4opGk.dex
  • /data/data/####/ncpVUntvfAzs433350B1Te3pYIBG3Uw9.dex
  • /data/data/####/ncpVUntvfAzs433350B1Te3pYIBG3Uw9.dex.flock (deleted)
  • /data/data/####/oQTlufTBQy4f2UEUafIOyvkoCLQ3NUUD.dex
  • /data/data/####/oQTlufTBQy4f2UEUafIOyvkoCLQ3NUUD.dex.flock (deleted)
  • /data/data/####/oTd2fkVxin9aCMoVd9OBFGd64J2Xuns5.dex
  • /data/data/####/oTd2fkVxin9aCMoVd9OBFGd64J2Xuns5.dex.flock (deleted)
  • /data/data/####/oY3URRru26BGeWZcW9cZ6RZhDaq2AYHh.dex
  • /data/data/####/oY3URRru26BGeWZcW9cZ6RZhDaq2AYHh.dex.flock (deleted)
  • /data/data/####/p8hex5oBOEH7D4iDQxKpO7fEV8oPHptI.dex
  • /data/data/####/p8hex5oBOEH7D4iDQxKpO7fEV8oPHptI.dex.flock (deleted)
  • /data/data/####/pSfRUJ65GbbXGDiJvWXMdYWDiT9swn8v.dex
  • /data/data/####/pSfRUJ65GbbXGDiJvWXMdYWDiT9swn8v.dex.flock (deleted)
  • /data/data/####/pd3Zl0TVbFByOUwxM4y4rCWvapwCJFw0.dex
  • /data/data/####/pd3Zl0TVbFByOUwxM4y4rCWvapwCJFw0.dex.flock (deleted)
  • /data/data/####/qV2KwrVprKmBSysZWr6T2wswEsfFVeSq.dex
  • /data/data/####/qV2KwrVprKmBSysZWr6T2wswEsfFVeSq.dex.flock (deleted)
  • /data/data/####/qf6VOibambOJ8sEaWBftLbVBeZNMiEPk.dex
  • /data/data/####/qf6VOibambOJ8sEaWBftLbVBeZNMiEPk.dex.flock (deleted)
  • /data/data/####/qs8isapOkYaj5Wv6etxOBhzIrxAqx3Zu.dex
  • /data/data/####/qs8isapOkYaj5Wv6etxOBhzIrxAqx3Zu.dex.flock (deleted)
  • /data/data/####/rwgpGCGqks2vab292KoXb49f8UcpDib4.dex
  • /data/data/####/rwgpGCGqks2vab292KoXb49f8UcpDib4.dex.flock (deleted)
  • /data/data/####/s68oiUuY9BC3Bx6ylq43CQ0vb7LgxNWj.dex
  • /data/data/####/s68oiUuY9BC3Bx6ylq43CQ0vb7LgxNWj.dex.flock (deleted)
  • /data/data/####/sBlts8NAtgMfYq5UrcApY4vz34Xxrp7Z.dex
  • /data/data/####/siCzt4Y8tBJjwYBULl0lhm794vrWPWzc.dex
  • /data/data/####/siCzt4Y8tBJjwYBULl0lhm794vrWPWzc.dex.flock (deleted)
  • /data/data/####/tnQ4YEPE2NRBgAyT8di7uEmc1fvAoars.dex
  • /data/data/####/tnQ4YEPE2NRBgAyT8di7uEmc1fvAoars.dex.flock (deleted)
  • /data/data/####/tpgUErK2iNa8o9ivB1Vxf1zdBwnC28lj.dex
  • /data/data/####/tpgUErK2iNa8o9ivB1Vxf1zdBwnC28lj.dex.flock (deleted)
  • /data/data/####/tpi7jaT3bk0QgMAdDNuDY7KmSFYxTBk7.dex
  • /data/data/####/tpi7jaT3bk0QgMAdDNuDY7KmSFYxTBk7.dex.flock (deleted)
  • /data/data/####/ttLcDtdAWBUbuTOFsN0UMS9B7CaT3NzJ.dex
  • /data/data/####/ttLcDtdAWBUbuTOFsN0UMS9B7CaT3NzJ.dex.flock (deleted)
  • /data/data/####/uWQM3lp01RwagiNlEpavpxftCrqCOE4e.dex
  • /data/data/####/uWQM3lp01RwagiNlEpavpxftCrqCOE4e.dex.flock (deleted)
  • /data/data/####/ui4EC4vcGeSfPcdyNhYOvaWJZjJ2idYA.dex
  • /data/data/####/ussbAC5mWizBBj7xzCFFsu8ycpIXjmz0.dex
  • /data/data/####/ussbAC5mWizBBj7xzCFFsu8ycpIXjmz0.dex.flock (deleted)
  • /data/data/####/uuDU2xC6Rgk6SoA6JCZhLhfhS2HQjZac.dex
  • /data/data/####/uuDU2xC6Rgk6SoA6JCZhLhfhS2HQjZac.dex.flock (deleted)
  • /data/data/####/vqieJWLSz0aDxS2PNfCFqbewvWi6fEFa.dex
  • /data/data/####/vqieJWLSz0aDxS2PNfCFqbewvWi6fEFa.dex.flock (deleted)
  • /data/data/####/xYuKOHjk0ro9O6eaR5fSjMH6NHI2ADG6.dex
  • /data/data/####/xYuKOHjk0ro9O6eaR5fSjMH6NHI2ADG6.dex.flock (deleted)
  • /data/data/####/yNl1cB9JdS5geO2p7KMihXbHvNsvgWqy.dex
  • /data/data/####/yNl1cB9JdS5geO2p7KMihXbHvNsvgWqy.dex.flock (deleted)
  • /data/data/####/yPuj69OEOJN94ljQhlUt49kAcerk5UeO.dex
  • /data/data/####/yPuj69OEOJN94ljQhlUt49kAcerk5UeO.dex.flock (deleted)
  • /data/data/####/yQHCbrGrj62rFVnXTRjKjeJn71aEqV5t.dex
  • /data/data/####/yQHCbrGrj62rFVnXTRjKjeJn71aEqV5t.dex.flock (deleted)
  • /data/data/####/yZLM8IsBtekLhuWZLcxjbKpKifjwhOzd.dex
  • /data/data/####/yZLM8IsBtekLhuWZLcxjbKpKifjwhOzd.dex.flock (deleted)
  • /data/data/####/ymOxpMcijf7Rui5ifbnsjtfSiG4O1nz7.dex
  • /data/data/####/ymOxpMcijf7Rui5ifbnsjtfSiG4O1nz7.dex.flock (deleted)
  • /data/data/####/z6bmQoTjUZSpTi2ysAMyPNKvtr8C2Ory.dex
  • /data/data/####/z6bmQoTjUZSpTi2ysAMyPNKvtr8C2Ory.dex.flock (deleted)
  • /data/data/####/zQr2EuAHt5NflGmJh5KQQRflJpqzS3eW.dex
  • /data/data/####/zQr2EuAHt5NflGmJh5KQQRflJpqzS3eW.dex.flock (deleted)
  • /data/data/####/zYa1GHtvSCEdbXRPpCLDh3DDNIOlsWBv.dex
  • /data/data/####/zvyGcfpt6XehYZPRfrA080oMflz6rJm1.dex
  • /data/data/####/zvyGcfpt6XehYZPRfrA080oMflz6rJm1.dex.flock (deleted)
  • /data/data/####/ۦۖ۫
  • /data/data/####/ۦۖ۫.
Miscellaneous:
Loads the following dynamic libraries:
  • libjiagu
Uses the following algorithms to decrypt data:
  • AES
  • AES-ECB-PKCS5Padding
  • DES
Uses special library to hide executable bytecode.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android