Technical information
Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- l####.####.nl
- google-####.com
- 1####.####.15
- insanet####.com
- ma####.####.com
- x####.####.com
- v5w3gcn####.ru
- snap####.nl
- a####.####.com
HTTP GET requests:
- x####.####.com/click?i=####
- snap####.nl/cookiepolicy?p=####&pi=####
- snap####.nl/css/fonts/montserratlight-webfont.ttf
- l####.####.nl/landing1-mobile?pi=####&pt1=####
- l####.####.nl/template_assets/js/jquery.validate.js
- l####.####.nl/template_assets/js/jquery.js
- l####.####.nl/template_assets/elements/form/profiles/chick05.jpg
- l####.####.nl/template_assets/elements/form/profiles/chick03.jpg
- snap####.nl/html/inc/cookiebanner.html
- snap####.nl/css/fonts/montserratbold-webfont.ttf
- snap####.nl/css/styles.less?av=####
- a####.####.com/rtb/log.php?xref=####&fprint=####
- insanet####.com/?a=####&c=####&s1=####&s2=####&s3=####
- snap####.nl/content/5/557517/fotos/105619.jpg
- v5w3gcn####.ru/site_total.php?c=####
- snap####.nl/img/splash/background.jpg
- snap####.nl/js/application.js?av=####
- snap####.nl/img/splash/badge-shield.png
- snap####.nl/img/sponsors/logo-frozengeeks.png
- snap####.nl/voorwaarden?pi=####
- snap####.nl/js/jquery.mycookie.js?av=####
- snap####.nl/img/splash/badge-one.png
- snap####.nl/js/search.js?av=####
- l####.####.nl/template_assets/elements/form/profiles/chick07.jpg
- l####.####.nl/template_assets/js/vegas.min.js
- snap####.nl/img/splash/06.jpg
- l####.####.nl/template_assets/elements/form/profiles/chick01.jpg
- l####.####.nl/template_assets/js/providers/provider.js
- ma####.####.com/font-awesome/4.3.0/css/font-awesome.min.css
- snap####.nl/img/sponsors/logo-pinkmelon.png
- snap####.nl/img/splash/hand-phone.png
- snap####.nl/img/splash/03.jpg
- snap####.nl/img/logo.png
- snap####.nl/js/widget/filtersystem.js?av=####
- snap####.nl/js/widget/favorite.js?av=####
- google-####.com/analytics.js
- snap####.nl/js/hogan-2.0.0.min.js?av=####
- l####.####.nl/template_assets/elements/form/profiles/chick04.jpg
- l####.####.nl/template_assets/elements/form/profiles/chick02.jpg
- snap####.nl/splash?pi=####
- snap####.nl/js/widget/popup.js?av=####
- snap####.nl/js/polyfills.js?av=####
- google-####.com/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&ul=...
- snap####.nl/js/storage.js?av=####
- snap####.nl/img/splash/02.jpg
- google-####.com/r/collect?v=####&_v=####&a=####&t=####&_s=####&dl=####&u...
- snap####.nl/sponsors?p=####&pi=####
- snap####.nl/img/splash/04.jpg
- snap####.nl/js/widget/login.js
- snap####.nl/img/sponsors/logo-joyfactor.png
- snap####.nl/?pi=####
- l####.####.nl/template_assets/js/x-tools.js
- l####.####.nl/template_assets/elements/form/profiles/chick06.jpg
- snap####.nl/js/jquery.simplePagination.js?av=####
- snap####.nl/img/sponsors/logo-project89109.png
- l####.####.nl/translation/datingprovider/nl/
- l####.####.nl/landing1-mobile/?pi=####&pt1=####
- snap####.nl/js/jquery.cookies.2.2.0.min.js?av=####
- snap####.nl/img/splash/center-pic.jpg
- snap####.nl/img/sponsors/logo-islive.png
- snap####.nl/css/fonts/fontawesome-webfont.ttf
- v5w3gcn####.ru/Look%20Search%20Trace_files/style.css
- snap####.nl/js/yepnope.1.5.4-pre.js?av=####
- snap####.nl/img/splash/01.jpg
- snap####.nl/img/splash/05.jpg
- snap####.nl/js/jquery-1.10.2.min.js?av=####
- l####.####.nl/template_assets/js/providers/dating.provider.js
- snap####.nl/css/fonts/montserratregular-webfont.ttf
- snap####.nl/js/widget/register.js
HTTP POST requests:
- snap####.nl/ajax/common.php?action=####
- 1####.####.15/?z=####
- v5w3gcn####.ru/apk_main.php?get_hash=####
- l####.####.nl/landing1-mobile/
Modified file system:
Creates the following files:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/f_000016
- /data/data/####/cache/webviewCacheChromium/f_000018
- /data/data/####/cache/webviewCacheChromium/f_000019
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000014
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000015
- /data/data/####/shared_prefs/semipref.xml.bak
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/cache/webviewCacheChromium/f_000017
- /data/data/####/cache/webviewCacheChromium/f_00001b
- /data/data/####/cache/webviewCacheChromium/f_00001c
- /data/data/####/cache/webviewCacheChromium/f_00001a
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/databases/webview.db-journal
- /data/data/####/shared_prefs/semipref.xml
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Uses administrator priveleges.
Contains functionality to send SMS messages automatically.
