Android.Banker.8048

Technical information

Malicious functions:

Executes code of the following detected threats:

Android.Banker.7855

Network activity:

Connects to:

UDP(???) pla####.google####.com:443
UDP(???) and####.google####.com:443
UDP(DNS) <Google DNS>
UDP(DNS) 8####.8.4.4:53
TCP(TLS/1.0) pla####.google####.com:443
TCP(TLS/1.0) and####.google####.com:443
TCP(TLS/1.2) and####.google####.com:443
TCP(TLS/1.2) 64.2####.161.94:443
TCP(TLS/1.2) 1####.194.222.138:443

DNS requests:

and####.google####.com
devicei####.google####.com
i.y####.com
pla####.google####.com
pla####.googleu####.com
playsto####.google####.com
prod-lt####.google####.com
www.google####.com

File system changes:

Creates the following files:

/data/data/####/0.dex
/data/data/####/0.dex.flock (deleted)
/data/data/####/1.dex
/data/data/####/1.dex.flock (deleted)
/data/data/####/10.dex
/data/data/####/10.dex.flock (deleted)
/data/data/####/11.dex
/data/data/####/11.dex.flock (deleted)
/data/data/####/12.dex
/data/data/####/12.dex.flock (deleted)
/data/data/####/13.dex
/data/data/####/13.dex.flock (deleted)
/data/data/####/14.dex
/data/data/####/14.dex.flock (deleted)
/data/data/####/15.dex
/data/data/####/15.dex.flock (deleted)
/data/data/####/16.dex
/data/data/####/16.dex.flock (deleted)
/data/data/####/17.dex
/data/data/####/17.dex.flock (deleted)
/data/data/####/18.dex
/data/data/####/18.dex.flock (deleted)
/data/data/####/19.dex
/data/data/####/19.dex.flock (deleted)
/data/data/####/2.dex
/data/data/####/2.dex.flock (deleted)
/data/data/####/20.dex
/data/data/####/20.dex.flock (deleted)
/data/data/####/21.dex
/data/data/####/21.dex.flock (deleted)
/data/data/####/22.dex
/data/data/####/22.dex.flock (deleted)
/data/data/####/23.dex
/data/data/####/23.dex.flock (deleted)
/data/data/####/24.dex
/data/data/####/24.dex.flock (deleted)
/data/data/####/25.dex
/data/data/####/25.dex.flock (deleted)
/data/data/####/26.dex
/data/data/####/26.dex.flock (deleted)
/data/data/####/27.dex
/data/data/####/27.dex.flock (deleted)
/data/data/####/28.dex
/data/data/####/28.dex.flock (deleted)
/data/data/####/29.dex
/data/data/####/29.dex.flock (deleted)
/data/data/####/3.dex
/data/data/####/3.dex.flock (deleted)
/data/data/####/30.dex
/data/data/####/30.dex.flock (deleted)
/data/data/####/31.dex
/data/data/####/31.dex.flock (deleted)
/data/data/####/32.dex
/data/data/####/32.dex.flock (deleted)
/data/data/####/33.dex
/data/data/####/33.dex.flock (deleted)
/data/data/####/34.dex
/data/data/####/34.dex.flock (deleted)
/data/data/####/35.dex
/data/data/####/35.dex.flock (deleted)
/data/data/####/36.dex
/data/data/####/36.dex.flock (deleted)
/data/data/####/37.dex
/data/data/####/37.dex.flock (deleted)
/data/data/####/38.dex
/data/data/####/38.dex.flock (deleted)
/data/data/####/39.dex
/data/data/####/39.dex.flock (deleted)
/data/data/####/4.dex
/data/data/####/4.dex.flock (deleted)
/data/data/####/40.dex
/data/data/####/40.dex.flock (deleted)
/data/data/####/41.dex
/data/data/####/41.dex.flock (deleted)
/data/data/####/42.dex
/data/data/####/42.dex.flock (deleted)
/data/data/####/43.dex
/data/data/####/43.dex.flock (deleted)
/data/data/####/44.dex
/data/data/####/44.dex.flock (deleted)
/data/data/####/45.dex
/data/data/####/45.dex.flock (deleted)
/data/data/####/46.dex
/data/data/####/46.dex.flock (deleted)
/data/data/####/47.dex
/data/data/####/47.dex.flock (deleted)
/data/data/####/48.dex
/data/data/####/48.dex.flock (deleted)
/data/data/####/49.dex
/data/data/####/49.dex.flock (deleted)
/data/data/####/5.dex
/data/data/####/5.dex.flock (deleted)
/data/data/####/50.dex
/data/data/####/50.dex.flock (deleted)
/data/data/####/51.dex
/data/data/####/51.dex.flock (deleted)
/data/data/####/52.dex
/data/data/####/52.dex.flock (deleted)
/data/data/####/53.dex
/data/data/####/53.dex.flock (deleted)
/data/data/####/54.dex
/data/data/####/54.dex.flock (deleted)
/data/data/####/55.dex
/data/data/####/55.dex.flock (deleted)
/data/data/####/56.dex
/data/data/####/56.dex.flock (deleted)
/data/data/####/57.dex
/data/data/####/57.dex.flock (deleted)
/data/data/####/58.dex
/data/data/####/58.dex.flock (deleted)
/data/data/####/59.dex
/data/data/####/59.dex.flock (deleted)
/data/data/####/6.dex
/data/data/####/6.dex.flock (deleted)
/data/data/####/60.dex
/data/data/####/60.dex.flock (deleted)
/data/data/####/61.dex
/data/data/####/61.dex.flock (deleted)
/data/data/####/62.dex
/data/data/####/62.dex.flock (deleted)
/data/data/####/7.dex
/data/data/####/7.dex.flock (deleted)
/data/data/####/8.dex
/data/data/####/8.dex.flock (deleted)
/data/data/####/9.dex
/data/data/####/9.dex.flock (deleted)

Miscellaneous:

Adds tasks to the system scheduler.

技术

术语

教育培训

误区

Technical information

Curing recommendations

Free trial