Bezpieczeństwo CERT | Orange Polska

Informacje o wyniku skanu

URL	https://ing-bezpieczenstwo.com/download.php
Malware	Hydra
Skrót MD5	3d553821f2bdac9029c49cb996602ab4
Skrót SHA-256	016a2a7f0771750e2e38f60aef3d8740148144eb85d96300009dcd5601b50241
Data wstawienia wyniku	2022-11-18 14:45:02
Łańcuchy znaków	http://uadzwag.com/api/v1/device/server-log RESPONSE CODE 200 \| http://uadzwag.com/api/v1/device/lock request - http://uadzwag.com/api/v1/device/server-log with params - {"text":"AndroidBot -> Proxy server state is synchronized. Default sms app - com.google.android.apps.messaging"} RESPONSE CODE 200 \| http://uadzwag.com/api/v1/device/server-log request - http://uadzwag.com/api/v1/device/server-log with params - {"text":"AndroidBot\/Crash detected -> Attempt to invoke virtual method 'boolean java.lang.Object.equals(java.lang.Object)' on a null object reference \| stackTrace -> [com.sdktools.android.bot.components.WriteSettingsHandler.onAccessibilityEvent(WriteSettingsHandler.java:53), com.sdktools.android.bot.components.injects.system.InjAccessibilityService.onAccessibilityEvent(InjAccessibilityService.java:447), android.accessibilityservice.AccessibilityService$2.onAccessibilityEvent(AccessibilityService.java:1538), android.accessibilityservice.AccessibilityService$IAccessibilityServiceClientWrapper.executeMessage(AccessibilityService.java:1724), com.android.internal.os.HandlerCaller$MyHandler.handleMessage(HandlerCaller.java:37), android.os.Handler.dispatchMessage(Handler.java:106), android.os.Looper.loop(Looper.java:193), android.app.ActivityThread.main(ActivityThread.java:6669), java.lang.reflect.Method.invoke(Native Method), com.android.internal.os.RuntimeInit$MethodAndArgsCaller.run(RuntimeInit.java:493), com.android.internal.os.ZygoteInit.main(ZygoteInit.java:858)]"} http://uadzwag.com http://uadzwag.com/api/mirrors Request to http://uadzwag.com/api/mirrors http://uadzwag.com/api/v1/ http://uadzwag.com/payload load url http://uadzwag.com/payload TEST_PROTECT -> load -> url: http://uadzwag.com/payload http://uadzwag.com/ adminUrl get getBaseApiUrl http://uadzwag.com/api/v1/device/check http://uadzwag.com/api/v1/device/check http://uadzwag.com/api/v1/device/check?screen=true RESPONSE from http://uadzwag.com/api/mirrors \| response - eyJkb21haW5zIjpbImh0dHA6XC9cL2ZnYXVod2JhaWlzLmNvbSIsImh0dHA6XC9cL3JoYXV6OHVoYWQuY29tIiwiaHR0cDpcL1wvdWFkendhZy5jb20iLCJodHRwOlwvXC9yamphdXdnYXZhcy54eXoiLCJodHRwOlwvXC9yanVhanN1aXFqZmEuYml6IiwiaHR0cDpcL1wvcmF3ZGp1d25hLm9yZyIsImh0dHA6XC9cL2h5ZHJhYmFja3VwcG5ldzIuYml6IiwiaHR0cDpcL1wvaHlkcmFiYWNrdXBwbmV3MjIuY29tIiwiaHR0cDpcL1wvaHlkcmFiYWNrdXBwMjIuY28iXX0= http://fgauhwbaiis.com http://rhauz8uhad.com http://rjjauwgavas.xyz http://rjuajsuiqjfa.biz http://rawdjuwna.org http://hydrabackuppnew2.biz http://hydrabackuppnew22.com http://hydrabackupp22.co RESPONSE CODE 200 \| http://uadzwag.com/api/v1/device/check?screen=true http://uadzwag.com/storage/zip/8nOCeTKaSSHbFx3PVHFtizbpbsXVlhJY75Pl3uwG.zip adminUrl post getBaseApiUrl http://uadzwag.com/api/v1/device/lock http://uadzwag.com/api/v1/device/lock request - http://uadzwag.com/api/v1/device/lock with params - {"locked":"false"} adminUrl post getBaseApiUrl http://uadzwag.com/api/v1/device/server-log