Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Android.Locker.17098

Added to the Dr.Web virus database: 2023-07-14

Virus description added:

Technical information

Malicious functions:
Executes code of the following detected threats:
  • Android.Locker.14669
Network activity:
Connects to:
  • UDP(DNS) 8####.8.4.4:53
  • TCP(TLS/1.0) and####.a####.go####.com:443
  • TCP(TLS/1.0) www.google-####.com:443
  • TCP(TLS/1.0) www.go####.ru:443
  • TCP(TLS/1.0) i.bimbo####.com:443
  • TCP(TLS/1.0) i.dy####.com:443
  • TCP(TLS/1.0) 1####.194.73.95:443
  • TCP(TLS/1.0) ht-####.a####.com:443
  • TCP(TLS/1.0) www.googlet####.com:443
  • TCP(TLS/1.0) hw####.traffic####.net:443
  • TCP(TLS/1.0) dy####.com:443
  • TCP(TLS/1.0) cdn1-sm####.ph####.com:443
  • TCP(TLS/1.0) s####.g.doublec####.net:443
  • TCP(TLS/1.0) 1####.177.14.95:443
  • TCP(TLS/1.0) di.ph####.com:443
  • TCP(TLS/1.0) rr9---s####.g####.com:443
  • TCP(TLS/1.0) st####.traffic####.com:443
  • TCP(TLS/1.0) www.por####.com:443
  • TCP(TLS/1.0) sto####.google####.com:443
  • TCP(TLS/1.0) 2####.85.233.95:443
  • TCP(TLS/1.0) h####.por####.com:443
  • TCP(TLS/1.0) www.go####.com:443
  • TCP(TLS/1.0) hw-####.a####.com:443
  • TCP(TLS/1.0) ads.traffic####.net:443
  • TCP(TLS/1.2) 74.1####.205.95:443
  • TCP(TLS/1.2) 64.2####.165.102:443
  • TCP(TLS/1.2) 1####.194.73.95:443
  • TCP(TLS/1.2) 64.2####.165.94:443
  • UDP 1####.177.14.95:443
DNS requests:
  • ads.traffic####.net
  • and####.a####.go####.com
  • cdn1-sm####.ph####.com
  • di.ph####.com
  • dy####.com
  • ei.ph####.com
  • h####.por####.com
  • ht####.traffic####.net
  • ht-####.a####.com
  • hw####.traffic####.net
  • hw-####.a####.com
  • i.bimbo####.com
  • i.dy####.com
  • m####.traffic####.net
  • rr9---s####.g####.com
  • s####.g.doublec####.net
  • st####.traffic####.com
  • sto####.google####.com
  • v.dy####.com
  • www.go####.com
  • www.go####.ru
  • www.google-####.com
  • www.googlet####.com
  • www.por####.com
File system changes:
Creates the following files:
  • /data/data/####/018d15138b1a6b55_0
  • /data/data/####/021adf50ec1e54dc_0
  • /data/data/####/02bd1db19a7b06e8_0
  • /data/data/####/03f4265ea9d649ef_0
  • /data/data/####/043b03e46f446e6e_0
  • /data/data/####/04482983f6ed5c25_0
  • /data/data/####/04c977e1a6cbbd03_0
  • /data/data/####/05199ca385aedeab_0
  • /data/data/####/0592c682de8e7c36_0
  • /data/data/####/0602dd1dbce6eaa9_0
  • /data/data/####/0613cda615f03a24_0
  • /data/data/####/067d7abb805b3efc_0
  • /data/data/####/06e00520d9d6944e_0
  • /data/data/####/06e281fcaee7250d_0 (deleted)
  • /data/data/####/070423cfc5b3e95a_0
  • /data/data/####/07bb39f9c57b9545_0
  • /data/data/####/081326baf0f7877d_0
  • /data/data/####/0868f24e55fec45b_0 (deleted)
  • /data/data/####/08917a0b88d0f142_0
  • /data/data/####/0a364fb28e1eff70_0
  • /data/data/####/0a364fb28e1eff70_1
  • /data/data/####/0ae9610cfa69ac9e_0
  • /data/data/####/0b6c3bd569c0aff2_0
  • /data/data/####/0c5006e7612062e0_0
  • /data/data/####/0c81f89881d509aa_0
  • /data/data/####/0d035f037ab04930_0
  • /data/data/####/0e24a39c2a38855c_0 (deleted)
  • /data/data/####/0e83319c1d93de07_0
  • /data/data/####/0f50c9b5cab34a23_0
  • /data/data/####/108a35709f007ff3_0
  • /data/data/####/10f88ec13b797d9c_0
  • /data/data/####/11e6d0c100ef6553_0
  • /data/data/####/11e6d0c100ef6553_1
  • /data/data/####/123f6019b0174e56_0
  • /data/data/####/1251c9deb44f08a1_0
  • /data/data/####/1251c9deb44f08a1_s
  • /data/data/####/126756f5a75642b6_0
  • /data/data/####/12a6ab2820351259_0
  • /data/data/####/130dddad0d62fc8a_0
  • /data/data/####/13d1b1587015c6b6_0
  • /data/data/####/13d2472b524bec67_0
  • /data/data/####/13e77088e80af0e8_0
  • /data/data/####/13e77088e80af0e8_1
  • /data/data/####/14ea2e8e86aef299_0
  • /data/data/####/14ea2e8e86aef299_1
  • /data/data/####/163c75d4c2d381f3_0 (deleted)
  • /data/data/####/165f87c287083928_0
  • /data/data/####/168ea52470f6acb1_0
  • /data/data/####/16cf40d1c9f511f7_0
  • /data/data/####/16ffb54ebf135c18_0
  • /data/data/####/1718418df72ec6d3_0
  • /data/data/####/176e456ad06b8f5c_0
  • /data/data/####/17f92c6977627197_0 (deleted)
  • /data/data/####/18ac60a2f70217ff_0
  • /data/data/####/194782edaf866907_0
  • /data/data/####/1ac5b96ee8e5db35_0
  • /data/data/####/1ad6aae8f8db4756_0
  • /data/data/####/1adde5ba23826d96_0
  • /data/data/####/1af66e86f6c32353_0
  • /data/data/####/1bbf3bb7420fcaac_0
  • /data/data/####/1bfbd8a3cf05c012_0
  • /data/data/####/1bfbd8a3cf05c012_1
  • /data/data/####/1c1bbf6f796987d8_0
  • /data/data/####/1c9d0791f1810a50_0
  • /data/data/####/1cb60a49350afaf3_0
  • /data/data/####/1d31681f96e3c8eb_0
  • /data/data/####/1d5f0668257fcf0a_0
  • /data/data/####/1e1ed9fce87c9d15_0
  • /data/data/####/219937642c5998dd_0
  • /data/data/####/21d3feed8a6cf63f_0
  • /data/data/####/21d3feed8a6cf63f_1
  • /data/data/####/22838d66f5d04304_0
  • /data/data/####/2439f286cf5c4a18_0
  • /data/data/####/2439f286cf5c4a18_1
  • /data/data/####/24c6b074afe5f7b0_0
  • /data/data/####/24cc24ad06b07631_0
  • /data/data/####/24fe160d9bc16181_0
  • /data/data/####/258728e9352aa795_0
  • /data/data/####/25f3463e1c2b5718_0
  • /data/data/####/25f4b4aa5bb53934_0
  • /data/data/####/27643b97d66c71c9_0
  • /data/data/####/2809b427efd7ba31_0
  • /data/data/####/28565a8d221fdc73_0
  • /data/data/####/293e61e6a86db45d_0
  • /data/data/####/2940195bd9870d6e_0
  • /data/data/####/2940195bd9870d6e_1
  • /data/data/####/2a3ef970600653d7_0
  • /data/data/####/2c1cafad77809346_0
  • /data/data/####/2cc80dabc69f58b6_0
  • /data/data/####/2cd861b2910796e9_0
  • /data/data/####/2d52ecb52ad76875_0
  • /data/data/####/2e6ba934b8ed134c_0
  • /data/data/####/2e7a21eb1e41c1ab_0
  • /data/data/####/2eba0bdcecc06182_0 (deleted)
  • /data/data/####/2fb4885fff7bd002_0
  • /data/data/####/30304011d323abcd_0
  • /data/data/####/3046f8ded50eb41f_0
  • /data/data/####/30979d66a86dacfb_0
  • /data/data/####/31095393fa1573c9_0
  • /data/data/####/32d28afbde424478_0
  • /data/data/####/34005f2dca33fe2d_0
  • /data/data/####/34c1cf37cdd3afa6_0 (deleted)
  • /data/data/####/355d88afd9f81add_0
  • /data/data/####/355f871c855462c7_0
  • /data/data/####/356be87274470a44_0
  • /data/data/####/3672c8db773eaadb_0
  • /data/data/####/367d0bffc9db3eaf_0
  • /data/data/####/36ac7e2d67dec583_0
  • /data/data/####/3754cbb27367e6b1_0
  • /data/data/####/37828e0a7066aef2_0 (deleted)
  • /data/data/####/37bce0e50ad3c4c1_0
  • /data/data/####/37bce0e50ad3c4c1_1
  • /data/data/####/383c4b5377cdab9f_0
  • /data/data/####/383c917897862aa0_0
  • /data/data/####/386a6861e0b64af1_0
  • /data/data/####/38b3b93027851572_0
  • /data/data/####/390816ab82866504_0
  • /data/data/####/39720193f0999616_0
  • /data/data/####/3b4cf250778a8769_0
  • /data/data/####/3c04ededa4007b96_0
  • /data/data/####/3c1d9424cb905ba4_0
  • /data/data/####/3cbd980319d3ddf6_0
  • /data/data/####/3d081f330f3e18b2_0
  • /data/data/####/3d8ae358444e70f9_0
  • /data/data/####/3dc50cc4b9a329c2_0
  • /data/data/####/3e38521575fcc10a_0
  • /data/data/####/3e77eb94ac9edb28_0
  • /data/data/####/3ea4d78ea985ea67_0
  • /data/data/####/3ea97e05058ce673_0
  • /data/data/####/3ef6a03ad6835bc8_0 (deleted)
  • /data/data/####/3f517de0fe147b39_0
  • /data/data/####/3f621d096d9c64be_0
  • /data/data/####/402f23f8716b9f1f_0
  • /data/data/####/4084420f09e6be02_0
  • /data/data/####/40cdbf12d63ff390_0
  • /data/data/####/41201213438aae6d_0
  • /data/data/####/41788e71d4efae19_0
  • /data/data/####/417db462687a0a1c_0
  • /data/data/####/41d6ff1f09624df1_0
  • /data/data/####/43380b82b5ffddc1_0
  • /data/data/####/443d5dae9a6a7b81_0
  • /data/data/####/443d5dae9a6a7b81_1
  • /data/data/####/44479bd327d7ea23_0
  • /data/data/####/4454ed00baf5fb09_0
  • /data/data/####/4481699d00a5de94_0
  • /data/data/####/45da00c45bd8257e_0
  • /data/data/####/461847ac4a2068be_0
  • /data/data/####/46a1a0a60c5b0890_0
  • /data/data/####/473d41ca8d20f337_0
  • /data/data/####/47e64ff866434580_0
  • /data/data/####/48b64acbbe70a54a_0
  • /data/data/####/49ecbe5fc2d3d68d_0
  • /data/data/####/49fef156459c1e57_0
  • /data/data/####/4a59016d0dcf0ddb_0
  • /data/data/####/4a765428432e128d_0
  • /data/data/####/4aed58c0801873b3_0
  • /data/data/####/4b1f3334fca9b0a9_0 (deleted)
  • /data/data/####/4beaa1a3cc9943b7_0
  • /data/data/####/4bfc80447c620ef2_0
  • /data/data/####/4cb013792b196a35_0
  • /data/data/####/4cb013792b196a35_1
  • /data/data/####/4dc3c3a268470351_0
  • /data/data/####/4f98b66ab537072f_0
  • /data/data/####/5005224befa4799d_0
  • /data/data/####/500a6cabf873b59a_0
  • /data/data/####/50211c4932d1a498_0
  • /data/data/####/514352aa293c56b8_0
  • /data/data/####/5308995aae9ad2b4_0
  • /data/data/####/54182b2b6fc364d6_0
  • /data/data/####/543650778f9843aa_0
  • /data/data/####/54d69d165eaee047_0
  • /data/data/####/556a06556fab7058_0
  • /data/data/####/55ad35aeff363db8_0
  • /data/data/####/585ca069dc8ada66_0
  • /data/data/####/58689b0258328b04_0
  • /data/data/####/58689b0258328b04_1
  • /data/data/####/596c956f005b74d9_0
  • /data/data/####/5a21ffab32606583_0
  • /data/data/####/5a6d9bd76f87b4f2_0
  • /data/data/####/5a7e723af6fa7163_0
  • /data/data/####/5bc528c031d33342_0
  • /data/data/####/5c599f4a04756482_0
  • /data/data/####/5cdc2048bff63a2e_0
  • /data/data/####/5dccc9ac06884686_0
  • /data/data/####/5e09b1cbf6c9eed7_0
  • /data/data/####/5e3d8f8f18e3ef42_0
  • /data/data/####/5e8285f970616ba5_0
  • /data/data/####/5eb1f867c54432cb_0
  • /data/data/####/5ed80b20312da28e_0
  • /data/data/####/5f5bd40d63d852fc_0
  • /data/data/####/5f74217898c9612a_0
  • /data/data/####/60606a7dbba6ca27_0
  • /data/data/####/60639ce8b8e958a7_0
  • /data/data/####/60af5fb0f3344d87_0
  • /data/data/####/60e6331c0dcfa968_0
  • /data/data/####/61e92a81e5990326_0
  • /data/data/####/621d0e64af6d9a1b_0
  • /data/data/####/623f0b7e6ba7a4d1_0
  • /data/data/####/626d91809c23dc3e_0
  • /data/data/####/62c7a4b13f61aac3_0
  • /data/data/####/63cc07fb611c953c_0
  • /data/data/####/63dc50d01357a923_0
  • /data/data/####/6453d2b6ddaf56ed_0
  • /data/data/####/647e228ca04c2987_0
  • /data/data/####/64dee11fd10c69f1_0
  • /data/data/####/65420e613012fee5_0
  • /data/data/####/66061a7e4fa23600_0
  • /data/data/####/6631fcd46ab76c8c_0
  • /data/data/####/66d65c0f8548ebe9_0
  • /data/data/####/671ce8fb6cecf26e_0
  • /data/data/####/679a18117d4565f7_0
  • /data/data/####/6844a089b1e01949_0
  • /data/data/####/684db942514c4d57_0
  • /data/data/####/69741e843cad0afa_0
  • /data/data/####/698d8bb0b3119a94_0
  • /data/data/####/698d8bb0b3119a94_s
  • /data/data/####/6a72b2c12acebb64_0
  • /data/data/####/6bec6a0849d8a437_0
  • /data/data/####/6c753f388aaf72e0_0
  • /data/data/####/6c8ccd8b0e65707c_0
  • /data/data/####/6d89e6d77db7efc6_0
  • /data/data/####/6e356ed9ce03f38a_0
  • /data/data/####/6e63164c8fc7d865_0
  • /data/data/####/6e75a5a15ea0acf3_0
  • /data/data/####/6edcbf6a98f13b57_0
  • /data/data/####/718da43d1c70041f_0
  • /data/data/####/71c079f55c10d374_0
  • /data/data/####/729adec0d04545d1_0
  • /data/data/####/734151022703a189_0
  • /data/data/####/735b1ba42c3380e0_0
  • /data/data/####/7387a061ad84992e_0
  • /data/data/####/74f79efc53b76242_0
  • /data/data/####/7521762219bdc743_0
  • /data/data/####/757e91613066e08a_0
  • /data/data/####/757e91613066e08a_1
  • /data/data/####/75fff9f4906ad7b7_0
  • /data/data/####/762def82091d42bf_0
  • /data/data/####/77231764581b5aa7_0
  • /data/data/####/77ad687968b4f726_0
  • /data/data/####/77cecf304b7bd76a_0
  • /data/data/####/782a39b2942e2ec6_0
  • /data/data/####/7a9ab3ccc0d49f52_0
  • /data/data/####/7aa0fc781acc6207_0
  • /data/data/####/7bfecc43592a5a75_0
  • /data/data/####/7c36fcfeed892bef_0
  • /data/data/####/7c36fcfeed892bef_1
  • /data/data/####/7de58db8897f4708_0
  • /data/data/####/7e2b20bced5e2500_0
  • /data/data/####/7e75b8e8e17e5881_0
  • /data/data/####/7e75b8e8e17e5881_s
  • /data/data/####/7f46a46534057bb9_0
  • /data/data/####/7fe4f8749b31f1a7_0
  • /data/data/####/8076aef712b8232e_0
  • /data/data/####/8087de1fe735f515_0
  • /data/data/####/80e44630fd4e14f9_0
  • /data/data/####/82626a59b3e74396_0
  • /data/data/####/82626a59b3e74396_1
  • /data/data/####/830ab4f4473fd59d_0
  • /data/data/####/849785b1865d8cb1_0
  • /data/data/####/85885f38b9c76b61_0
  • /data/data/####/8651e178a0c8ccee_0
  • /data/data/####/87af7f615cc3101c_0
  • /data/data/####/8888bac454c36fa6_0
  • /data/data/####/8888bac454c36fa6_1
  • /data/data/####/889cdc123a2f269d_0
  • /data/data/####/88c4fa0a0ac6dd42_0
  • /data/data/####/88e0abecb3419fff_0
  • /data/data/####/88fa610ad74a0f38_0
  • /data/data/####/8acfcc8e0db184df_0
  • /data/data/####/8af1507bf8aebf11_0
  • /data/data/####/8b014d5e35ea5716_0
  • /data/data/####/8c8921e8e5c81b9a_0
  • /data/data/####/8d7f1ef5af5ccb73_0
  • /data/data/####/8e745a5deaafb374_0
  • /data/data/####/8f0116100b43ac4e_0
  • /data/data/####/8fd08b65377b9db0_0
  • /data/data/####/8ff8b74fc2748c78_0
  • /data/data/####/90458e8e4b800672_0
  • /data/data/####/908d6cb2d5651965_0
  • /data/data/####/913e556374075ac5_0
  • /data/data/####/926d0bfa1e20b844_0
  • /data/data/####/927c81f49c686279_0
  • /data/data/####/929671b7467e26f8_0
  • /data/data/####/92a0e20fff614adb_0
  • /data/data/####/930c2e9ac9cba6bd_0
  • /data/data/####/93d0c1e0d19d991b_0
  • /data/data/####/9402ef73a016ffbb_0
  • /data/data/####/944a1aa8-c362-4147-a0b2-b125de253f04.dex
  • /data/data/####/944a1aa8-c362-4147-a0b2-b125de253f04.dex.flock (deleted)
  • /data/data/####/9453999690a964cd_0
  • /data/data/####/95964d62c9def653_0
  • /data/data/####/95cae56d052c205b_0
  • /data/data/####/96255bd187941d9f_0
  • /data/data/####/96d134f339fe8015_0
  • /data/data/####/96d134f339fe8015_1
  • /data/data/####/970d5b60b8e3b86c_0
  • /data/data/####/981278de69f36b5a_0
  • /data/data/####/987229c4eae5319e_0
  • /data/data/####/9a0d821f0892a4ca_0
  • /data/data/####/9a6567ae564ce5d5_0
  • /data/data/####/9b31fabf2cfe6407_0
  • /data/data/####/9b69bd391f787141_0
  • /data/data/####/9bab62656d4d95c5_0
  • /data/data/####/9c14995d3d8e71d9_0
  • /data/data/####/9c31d8ad336b7c8d_0
  • /data/data/####/9cef30d4e4ba4130_0
  • /data/data/####/9dd13d1c4ee2872d_0
  • /data/data/####/9df1fce02a2e0327_0
  • /data/data/####/9df30a11e1b9af51_0
  • /data/data/####/9dff942d86bc8452_0
  • /data/data/####/9e2fba5c2243755c_0
  • /data/data/####/9e635611ec969e75_0
  • /data/data/####/9ea4b735086718a2_0
  • /data/data/####/9f6e2d24f8c41517_0
  • /data/data/####/9ffd71979038173b_0
  • /data/data/####/CURRENT
  • /data/data/####/Cookies-journal
  • /data/data/####/Databases.db-journal
  • /data/data/####/MANIFEST-000001
  • /data/data/####/QuotaManager-journal
  • /data/data/####/RabdA.dex
  • /data/data/####/RabdA.dex.flock (deleted)
  • /data/data/####/WebViewChromiumPrefs.xml
  • /data/data/####/a00ab9946ae02e70_0 (deleted)
  • /data/data/####/a08d79b16ec53387_0
  • /data/data/####/a0fc70127980d973_0
  • /data/data/####/a16286f21165fcea_0
  • /data/data/####/a1a0eb390b604316_0
  • /data/data/####/a1a0eb390b604316_1
  • /data/data/####/a1de6a4ab6f56e95_0
  • /data/data/####/a220af5d647d0f55_0
  • /data/data/####/a2775fffb6a35622_0
  • /data/data/####/a37d441230fc439f_0
  • /data/data/####/a3d970d37df78be2_0
  • /data/data/####/a3f1216233de2a7d_0
  • /data/data/####/a5aad13febc6a967_0
  • /data/data/####/a6a6f22756654095_0
  • /data/data/####/a6c2a77691ce81a2_0
  • /data/data/####/a7aae852d5fe9590_0
  • /data/data/####/a887e14cda142498_0
  • /data/data/####/a964c902f1f31db2_0
  • /data/data/####/a990ca7fd8a38925_0
  • /data/data/####/a9d56e07f351f496_0
  • /data/data/####/aa11eb6d7bbbc3c7_0
  • /data/data/####/aad4be480424f9bb_0
  • /data/data/####/ab88128ab69b3d44_0
  • /data/data/####/ac03f44665e13367_0 (deleted)
  • /data/data/####/ac05ee461cbe57ce_0
  • /data/data/####/ac23679c84b122dc_0
  • /data/data/####/ac3e8aa5c133d7f1_0
  • /data/data/####/ac52d8b90048722d_0
  • /data/data/####/acf2490229f75c43_0
  • /data/data/####/ae83765ed6dd09e2_0
  • /data/data/####/aeafe34adc808330_0
  • /data/data/####/aeafe34adc808330_1
  • /data/data/####/afb2bb27eedeaccf_0
  • /data/data/####/afb3eb2fef7c13b8_0
  • /data/data/####/afc03937280f28d7_0 (deleted)
  • /data/data/####/b19ef66cd7c405b7_0
  • /data/data/####/b1b52ea82a322369_0
  • /data/data/####/b1f93927bd84b0bb_0
  • /data/data/####/b253f4b682cd1ba2_0
  • /data/data/####/b2b45069752caa03_0
  • /data/data/####/b2e33ac23b153854_0
  • /data/data/####/b32bda7bd06ff1e1_0
  • /data/data/####/b34d51f02d2dbc7a_0
  • /data/data/####/b389392cdd6c3d17_0
  • /data/data/####/b3ef8bb1645fc7c4_0
  • /data/data/####/b3fea546deedc979_0
  • /data/data/####/b44ae7d9bdf1146a_0
  • /data/data/####/b4df51fc6c13d1c5_0
  • /data/data/####/b5dba64610102ec8_0
  • /data/data/####/b624efec332dd734_0
  • /data/data/####/b62634fef4bf120e_0
  • /data/data/####/b63252ddd2d130d5_0
  • /data/data/####/b6c33ea015e47338_0 (deleted)
  • /data/data/####/b72ca0ba3723566c_0
  • /data/data/####/b8d890109701b29f_0
  • /data/data/####/b944c4c4192ec264_0
  • /data/data/####/bab2827f5aa19f29_0
  • /data/data/####/bab2827f5aa19f29_1
  • /data/data/####/babf85c28a742701_0
  • /data/data/####/bb3c7cfcfa860f3e_0
  • /data/data/####/bb9b5423852ee814_0
  • /data/data/####/bb9d26a77b698eb9_0
  • /data/data/####/bbd0a58ed8be54f8_0
  • /data/data/####/bcaec807384a4c01_0
  • /data/data/####/bcc9a3e6684f6d10_0
  • /data/data/####/bd49ffa69488246a_0
  • /data/data/####/bdaa1c47560ecdfd_0
  • /data/data/####/bdbc3662be309e88_0
  • /data/data/####/be8e1d0ab8376afc_0
  • /data/data/####/bec5eafc9af51afe_0
  • /data/data/####/bf11bdada05cd2b5_0
  • /data/data/####/bfb8519d286940c4_0
  • /data/data/####/bfd453e687717cf8_0
  • /data/data/####/c1775fb1b2aa6087_0
  • /data/data/####/c242c006bd9451ba_0
  • /data/data/####/c29a6ee15665a880_0
  • /data/data/####/c3947a5c8488dac7_0
  • /data/data/####/c4280d1d14312d8e_0
  • /data/data/####/c436505a0b2cd181_0
  • /data/data/####/c4420e5520ee7d4b_0
  • /data/data/####/c451cf81c01502b7_0
  • /data/data/####/c4d7296ddb95928d_0
  • /data/data/####/c4ef1361e90122a4_0
  • /data/data/####/c55ce3c37b8521da_0
  • /data/data/####/c56383d4118a25e9_0
  • /data/data/####/c5e6ea10575fb29a_0
  • /data/data/####/c622aa819bb50794_0
  • /data/data/####/c689e8193f73de10_0
  • /data/data/####/c6e848954fa4816b_0
  • /data/data/####/c6f2b2b5a02ce0df_0
  • /data/data/####/c702d7977f47fb36_0
  • /data/data/####/ca4bcc1f31b6ce62_0
  • /data/data/####/cb76af4505eca2ff_0
  • /data/data/####/cb77956b05d16650_0 (deleted)
  • /data/data/####/cbb4edb83cb14ad0_0
  • /data/data/####/cc4c27a454ff1e6a_0
  • /data/data/####/cc77a71d1e6cdae1_0
  • /data/data/####/ccb1918df5c1ed67_0
  • /data/data/####/ccb6ae163afebfc0_0
  • /data/data/####/ccdc5c52035e7b54_0
  • /data/data/####/cd2d121893087462_0
  • /data/data/####/cd97ab14f4b3ddff_0
  • /data/data/####/ce5680518ad1d392_0
  • /data/data/####/cf105bb09a86fe25_0
  • /data/data/####/cf3649b3443185c5_0
  • /data/data/####/cf64c77b7a64a6f9_0
  • /data/data/####/com.mxrjvbya_preferences.xml
  • /data/data/####/d0243b947404046b_0 (deleted)
  • /data/data/####/d0e654a0b346d8cc_0
  • /data/data/####/d153d792c14431cd_0
  • /data/data/####/d153d792c14431cd_1
  • /data/data/####/d176547e4e80a764_0
  • /data/data/####/d18448241a9699fc_0
  • /data/data/####/d26a356579ad36a4_0
  • /data/data/####/d514afbdce703bbd_0
  • /data/data/####/d5fcc5725956d847_0
  • /data/data/####/d66e117d7163fb7f_0
  • /data/data/####/d67f30d503ac8486_0
  • /data/data/####/d72e87d56307bbd1_0
  • /data/data/####/d75daf5321c28799_0
  • /data/data/####/d771df9f95bdf1fe_0
  • /data/data/####/d9d6fc059daab9e3_0
  • /data/data/####/da3084bc3e8cb0f8_0
  • /data/data/####/dbb20877315b08c7_0
  • /data/data/####/dbb20877315b08c7_1
  • /data/data/####/dc195a8125f13d3c_0
  • /data/data/####/dc4d4a436c054191_0
  • /data/data/####/dc5a7861a40bb8b0_0
  • /data/data/####/dd08969630e1b74b_0
  • /data/data/####/de3b2a9ea571f75e_0
  • /data/data/####/df0093ecf60867db_0
  • /data/data/####/df8797ac0b475a05_0
  • /data/data/####/df9c053ae30901b5_0
  • /data/data/####/e08f74b0-4578-4c8f-9a25-0050bbf1a460.dex
  • /data/data/####/e08f74b0-4578-4c8f-9a25-0050bbf1a460.dex.flock (deleted)
  • /data/data/####/e23c1ed4e80b3b61_0
  • /data/data/####/e294c3d7499992f4_0
  • /data/data/####/e2b4ad83ed04ac6b_0
  • /data/data/####/e2fe7c38fe5cd87e_0
  • /data/data/####/e3423f7decb53a73_0
  • /data/data/####/e3423f7decb53a73_1
  • /data/data/####/e3b36bc6f5bc211f_0
  • /data/data/####/e41db450e2973e20_0
  • /data/data/####/e4a877fc13af311d_0
  • /data/data/####/e5614680-37f4-43ab-92dc-974e5a5b54f5.dex
  • /data/data/####/e5614680-37f4-43ab-92dc-974e5a5b54f5.dex.flock (deleted)
  • /data/data/####/e5a619820900ec9c_0
  • /data/data/####/e616a85fe1c18460_0
  • /data/data/####/e6da4a2e67424570_0
  • /data/data/####/e754d67f4bd1bd1a_0
  • /data/data/####/e7b5754ed668de7e_0
  • /data/data/####/e86aebcdda2c0e7b_0
  • /data/data/####/e89f6a18a20a472b_0
  • /data/data/####/e8dea98c37bce5a8_0
  • /data/data/####/e8eb80236ce3b384_0
  • /data/data/####/e8f8311cd3af4bd0_0
  • /data/data/####/e97ff3b66f2a2d09_0 (deleted)
  • /data/data/####/e991fbfedba2aab9_0
  • /data/data/####/ea0c7ed70355b665_0
  • /data/data/####/ea26d7f03bd3a519_0
  • /data/data/####/ea26d7f03bd3a519_1
  • /data/data/####/ea3142c59678136d_0
  • /data/data/####/ea420e2d7e655b78_0
  • /data/data/####/ea59a1f4c86e80d2_0
  • /data/data/####/ea6172e08d2ad1d8_0
  • /data/data/####/ebfb71c9fb1c8514_0
  • /data/data/####/ebfb71c9fb1c8514_1
  • /data/data/####/ec75a821cc4bc030_0
  • /data/data/####/ecacdb6b8749d885_0
  • /data/data/####/ecbbc3e97414cdb3_0
  • /data/data/####/ed1e59d6e3822b29_0
  • /data/data/####/eea453bb9d2ed839_0
  • /data/data/####/eeaca33fc42b4d6e_0
  • /data/data/####/ef561f6ad41b716f_0
  • /data/data/####/ef92b74305b6595d_0
  • /data/data/####/ef92b74305b6595d_s
  • /data/data/####/eff61582c309bc54_0 (deleted)
  • /data/data/####/effd37cf07a9b470_0 (deleted)
  • /data/data/####/f0cb9787ac0c1189_0
  • /data/data/####/f0f2ee67e8923976_0
  • /data/data/####/f0f2ee67e8923976_1
  • /data/data/####/f1ed7ff4dd2d2131_0
  • /data/data/####/f240ad85a9dbeaaa_0
  • /data/data/####/f49bfa0c13fa4f14_0
  • /data/data/####/f4a7f662183dd5e5_0
  • /data/data/####/f4c18c6294a07176_0
  • /data/data/####/f5eaa762420328be_0
  • /data/data/####/f5fa9c6556e1c73b_0
  • /data/data/####/f5fa9c6556e1c73b_1
  • /data/data/####/f64e3a5a147477a7_0
  • /data/data/####/f65fd29bbb5b3169_0
  • /data/data/####/f6dfbab6e0e84112_0
  • /data/data/####/f712b8394f0a4b9a_0
  • /data/data/####/f75b3f6afb775623_0
  • /data/data/####/f80a04e56bb6308e_0
  • /data/data/####/f8887572521127fb_0
  • /data/data/####/f8dcf3a7a8fd4c52_0
  • /data/data/####/f8e3a0b28bd76069_0
  • /data/data/####/f94034ebc039a021_0
  • /data/data/####/f9621f5cfdc5824e_0
  • /data/data/####/f9bb0fc3279791ee_0
  • /data/data/####/fa5e9626a521323a_0
  • /data/data/####/fa6194fbadaeea6e_0
  • /data/data/####/fad35a043c981528_0
  • /data/data/####/fbbe728c5bcf8916_0
  • /data/data/####/fcd030f00dbbc58f_0
  • /data/data/####/fda5e8deeb418265_0
  • /data/data/####/fee6ef73fdd6723e_0
  • /data/data/####/ff2efaac62bf01c5_0
  • /data/data/####/ff913dd4f5b48aaf_0
  • /data/data/####/ff93a6b50426173e_0 (deleted)
  • /data/data/####/ffd9eff8243127c5_0 (deleted)
  • /data/data/####/index
  • /data/data/####/metrics_guid
  • /data/data/####/oOYuEftZ.dex
  • /data/data/####/oOYuEftZ.dex.flock (deleted)
  • /data/data/####/osmrlqxnJ.dex
  • /data/data/####/osmrlqxnJ.dex.flock (deleted)
  • /data/data/####/the-real-index
  • /data/misc/####/primary.prof
Miscellaneous:
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.

Curing recommendations


Android

  1. If the mobile device is operating normally, download and install Dr.Web for Android Light. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web для Android Light onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android