Android.Banker.1134

Technical information

Malicious functions:

Sends data on received text messages to remote host.

Network activity:

Connecting to:

ko####.####.com
instagr####.####.net
trans####.####.com

HTTP GET requests:

instagr####.####.net/css/animate.css
instagr####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/lightgallery.min.css
instagr####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/analytics.js.indir
instagr####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/paper.css
instagr####.####.net/images/work_1.png
instagr####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/main.js.indir
instagr####.####.net/js/jquery.magnific-popup.min.js
instagr####.####.net/css/magnific-popup.css
instagr####.####.net/js/jquery.easing.1.3.js
instagr####.####.net/js/magnific-popup-options.js
instagr####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/translateelement.css
instagr####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/jquery.fancybox.css
instagr####.####.net/fonts/icomoon/icomoon.ttf?6####
instagr####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/element_main.js.indir
instagr####.####.net/
instagr####.####.net/js/modernizr-2.6.2.min.js
instagr####.####.net/css/icomoon.css
instagr####.####.net/css/bootstrap.css
instagr####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/bootstrap-paper.min.css
instagr####.####.net/home.html
instagr####.####.net/js/jquery.waypoints.min.js
instagr####.####.net/fonts/icomoon/icomoon.ttf?sr####
instagr####.####.net/js/bootstrap.min.js
trans####.####.com/translate_a/element.js?cb=####
instagr####.####.net/js/main.js
instagr####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/font-awesome.min.css
instagr####.####.net/Followers%20Manager%20&%20Tracker%20Tools%20_%20..._files/nprogress.css
ko####.####.com/check.php?code=####&package=####&product=####
instagr####.####.net/js/jquery.min.js
instagr####.####.net/css/style.css
instagr####.####.net/images/img_bg_1.jpg
instagr####.####.net/js/jquery.countTo.js

Modified file system:

Creates the following files:

/data/data/####/cache/webviewCacheChromium/data_3
/data/data/####/cache/webviewCacheChromium/data_2
/data/data/####/cache/webviewCacheChromium/data_1
/data/data/####/cache/webviewCacheChromium/data_0
/data/data/####/databases/localstorage/http_app1.realfollowers.net_0.localstorage-journal
/data/data/####/databases/webviewCookiesChromium.db-journal
/data/data/####/databases/google_analytics_v4.db-journal
/data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml.bak
/data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml
/data/data/####/databases/webview.db-journal
/data/data/####/cache/1470286953684.jar
/data/data/####/cache/webviewCacheChromium/f_000001
/data/data/####/databases/OneSignal.db-journal
/data/data/####/cache/webviewCacheChromium/f_000003
/data/data/####/cache/webviewCacheChromium/f_000002
/data/data/####/cache/webviewCacheChromium/f_000005
/data/data/####/cache/webviewCacheChromium/f_000004
/data/data/####/files/gaClientId
/data/data/####/cache/ApplicationCache.db-journal
/data/data/####/shared_prefs/OneSignal.xml
/data/data/####/cache/webviewCacheChromium/index
/data/data/####/cache/1470286953684.tmp