Android.SmsSend.15831

Technical information

Malicious functions:

Sends SMS messages:

18658196531: ####

Executes code of the following detected threats:

Android.SmsSend.812.origin

Network activity:

Connecting to:

1####.####.128
s####.####.cn
1####.####.128:8010

HTTP GET requests:

1####.####.128/get.php?hKey=####&did=####&packageName=####
s####.####.cn/versioncheck.aspx?
s####.####.cn/GetFeeData.aspx?iswifi=####
1####.####.128:8010/get.php?hKey=####&did=####&packageName=####
s####.####.cn/getconfig.aspx?

Modified file system:

Creates the following files:

/data/data/####/databases/cafemarathidb-journal
/data/data/####/shared_prefs/admob.xml
/data/data/####/cache/webviewCacheChromium/data_3
/data/data/####/cache/webviewCacheChromium/data_2
/data/data/####/cache/webviewCacheChromium/data_1
/data/data/####/cache/webviewCacheChromium/data_0
/data/data/####/databases/webviewCookiesChromium.db-journal
/data/data/####/shared_prefs/com.google.android.gms.measurement.prefs.xml.bak
/data/data/####/databases/google_analytics_v4.db-journal
/data/data/####/databases/com.google.android.gms.ads.db/localstorage/https_googleads.g.doubleclick.net_0.localstorage-journal
/data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml.bak
/data/data/####/shared_prefs/com.google.android.gms.analytics.prefs.xml
/data/data/####/cache/picasso-cache/bb708c818295ca0feac50a2868f13fc2.0.tmp
/data/data/####/databases/webview.db-journal
/data/data/####/cache/picasso-cache/00b7e2de227f8fb86ab0734f462e1951.1.tmp
/data/data/####/cache/ads1155141501.jar
/data/data/####/cache/webviewCacheChromium/f_000001
/data/data/####/cache/webviewCacheChromium/f_000003
/data/data/####/cache/webviewCacheChromium/f_000002
/data/data/####/cache/webviewCacheChromium/f_000005
/data/data/####/cache/webviewCacheChromium/f_000004
/data/data/####/cache/picasso-cache/00b7e2de227f8fb86ab0734f462e1951.0.tmp
/data/data/####/shared_prefs/com.google.android.gms.measurement.prefs.xml
/data/data/####/cache/ads-1403827577.jar
/data/data/####/cache/picasso-cache/journal.tmp
/data/data/####/cache/picasso-cache/f4e2a5cc0f6556430937d4d6b7a42a09.1.tmp
/data/data/####/cache/picasso-cache/bb708c818295ca0feac50a2868f13fc2.1.tmp
/data/data/####/cache/ApplicationCache.db-journal
/data/data/####/cache/picasso-cache/f4e2a5cc0f6556430937d4d6b7a42a09.0.tmp
/data/data/####/cache/webviewCacheChromium/index