Technical information
Malicious functions:
Sends SMS messages:
- 8844: 404
Network activity:
Connecting to:
- a####.####.et
HTTP GET requests:
- a####.####.et/wp-includes/js/thickbox/thickbox.css?ver=####
- a####.####.et/wp-includes/js/jquery/ui/jquery.ui.effect.min.js?ver=####
- a####.####.et/wp-content/plugins/suppamenu/standard/css/fontAwesome/style-min.css?ver=####
- a####.####.et/wp-content/uploads/2017/03/graduation-home-150x150.jpg
- a####.####.et/wp-content/themes/EducationWP/lib/css/defaults.css
- a####.####.et/wp-includes/js/jquery/jquery-migrate.min.js?ver=####
- a####.####.et/wp-content/uploads/2014/07/field.jpg
- a####.####.et/wp-content/uploads/2014/07/ict.jpg
- a####.####.et/wp-content/uploads/2014/07/AAU_Honors.jpg
- a####.####.et/wp-content/uploads/2014/10/news_blink.gif
- a####.####.et/wp-content/plugins/suppamenu/standard/css/hover-master/hover-min.css?ver=####
- a####.####.et/wp-content/uploads/2014/08/AAU-Location.jpg
- a####.####.et/wp-content/themes/EducationWP/lib/css/reset.css
- a####.####.et/wp-content/uploads/2014/07/book.jpg
- a####.####.et/
- a####.####.et/wp-includes/js/thickbox/loadingAnimation.gif
- a####.####.et/wp-content/themes/EducationWP/lib/js/jquery.mobilemenu.js?ver=####
- a####.####.et/wp-content/uploads/2015/08/picture.png
- a####.####.et/wp-content/plugins/ml-slider/assets/sliders/flexslider/flexslider.css?ver=####
- a####.####.et/wp-content/uploads/2017/03/march8-home.jpg
- a####.####.et/wp-includes/js/jquery/jquery.js?ver=####
- a####.####.et/wp-content/uploads/2017/03/enviroment-home.jpg
- a####.####.et/wp-content/plugins/suppamenu/standard/css/suppa_frontend_style.css?ver=####
- a####.####.et/wp-content/uploads/2014/12/press.jpg
- a####.####.et/wp-content/uploads/2017/03/aau-home.jpg
- a####.####.et/wp-content/uploads/2017/03/uclahome-150x150.jpg
- a####.####.et/wp-content/uploads/2016/02/wall.png
- a####.####.et/?ai1ec_render_js=####&is_backend=####&ver=####
- a####.####.et/wp-content/plugins/all-in-one-event-calendar/cache/22ed95f1_ai1ec_parsed_css.css?ver=####
- a####.####.et/wp-includes/js/hoverIntent.min.js?ver=####
- a####.####.et/wp-content/plugins/all-in-one-event-calendar/public/themes-ai1ec/vortex/font/ai1ec-icons.svg
- a####.####.et/wp-content/uploads/2017/03/enviroment-home-150x150.jpg
- a####.####.et/wp-content/uploads/2017/03/graduation-home.jpg
- a####.####.et/wp-content/plugins/easy-video-player/lib/flowplayer.min.js?ver=####
- a####.####.et/wp-content/themes/EducationWP/includes/featuredposts/scripts/jquery.cycle.all.js
- a####.####.et/wp-content/themes/EducationWP/lib/js/superfish.js?ver=####
- a####.####.et/wp-includes/css/dashicons.min.css?ver=####
- a####.####.et/wp-content/themes/EducationWP/images/social-profiles/linkedin.png
- a####.####.et/wp-content/plugins/ml-slider/assets/sliders/flexslider/jquery.flexslider-min.js?ver=####
- a####.####.et/wp-content/plugins/download-manager/css/front.css?ver=####
- a####.####.et/wp-content/plugins/ml-slider/assets/metaslider/public.css?ver=####
- a####.####.et/wp-content/themes/EducationWP/style.css
- a####.####.et/wp-content/plugins/suppamenu/standard/js/suppa_frontend.min.js?ver=####
- a####.####.et/wp-content/uploads/2017/03/uclahome.jpg
- a####.####.et/wp-content/uploads/2017/03/march8-home-150x150.jpg
- a####.####.et/wp-includes/js/jquery/ui/jquery.ui.core.min.js?ver=####
- a####.####.et/wp-content/uploads/2014/07/lib2.jpg
- a####.####.et/wp-content/uploads/2015/08/sound.png
- a####.####.et/wp-content/plugins/ml-slider/assets/sliders/flexslider/bg_direction_nav.png
- a####.####.et/wp-content/themes/EducationWP/images/date.png
- a####.####.et/wp-content/themes/EducationWP/images/social-profiles/facebook.png
- a####.####.et/wp-content/uploads/suppamenu/suppa_js_settings.js?ver=####
- a####.####.et/wp-content/uploads/2017/03/aau-home-150x150.jpg
- a####.####.et/wp-content/themes/EducationWP/images/social-profiles/twitter.png
- a####.####.et/wp-content/uploads/2015/08/movie.png
- a####.####.et/wp-content/uploads/2014/09/Untitled.png
- a####.####.et/wp-content/uploads/2017/03/adwa-home-150x150.jpg
- a####.####.et/wp-content/plugins/easy-video-player/lib/skin/all-skins.css?ver=####
- a####.####.et/wp-includes/js/thickbox/thickbox.js?ver=####
- a####.####.et/wp-content/themes/EducationWP/images/widget-list.png
- a####.####.et/wp-content/uploads/suppamenu/suppa_custom_style.css?ver=####
Modified file system:
Creates the following files:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/files/textingmsgcache
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/shared_prefs/TinyDB1.xml
- /data/data/####/shared_prefs/multidex.version.xml
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/databases/webview.db-journal
- /data/data/####/shared_prefs/TextingState.xml
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Contains functionality to send SMS messages automatically.
