Technical information
Malicious functions:
Sends SMS messages:
- 4446: SKLN AF01 VIDEOPU150v3.1.4 android ####
Network activity:
Connecting to:
- iq####.com
- b####.com
- iq####.com:8999
- 2####.####.5:8765
- slm####.####.com
HTTP GET requests:
- iq####.com/static/css/swipebox.min.css
- iq####.com/static/css/appbox.css
- iq####.com/static/js/plugins/jquery.fittext.js
- slm####.####.com/video/7.jpg
- iq####.com/static/images/title_bg_img.png
- b####.com/
- iq####.com/api/img/banner.jpg
- slm####.####.com/video/1.jpg
- iq####.com/static/js/plugins/jquery.min.js
- iq####.com/static/css/iconfont.css
- slm####.####.com/music/4.jpg
- slm####.####.com/video/2.jpg
- iq####.com:8999/skylindex.jsp
- iq####.com/skylindex.jsp
- slm####.####.com/video/10.jpg
- slm####.####.com/video/9.jpg
- slm####.####.com/wallpaper/7.jpg
- iq####.com/static/js/plugins/ios-orientationchange-fix.js
- slm####.####.com/wallpaper/3.jpg
- iq####.com/static/css/style.css
- slm####.####.com/video/4.jpg
- slm####.####.com/wallpaper/8.jpg
- iq####.com/static/js/plugins/fastclick.js
- iq####.com/static/fonts/iconfont/iconfont.ttf
- slm####.####.com/wallpaper/5.jpg
- iq####.com/static/css/swiper.min.css
- slm####.####.com/video/11.jpg
- slm####.####.com/music/5.jpg
- slm####.####.com/music/3.jpg
- iq####.com/static/js/index.js
- slm####.####.com/wallpaper/6.jpg
- slm####.####.com/music/6.jpg
- iq####.com/static/js/plugins/swiper.min.js
- iq####.com/wapinit
- iq####.com/video-play.jsp?cover=####&src=####
- slm####.####.com/wallpaper/1.jpg
- slm####.####.com/video/5.jpg
- slm####.####.com/video/3.jpg
- slm####.####.com/music/1.jpg
- slm####.####.com/wallpaper/4.jpg
- slm####.####.com/wallpaper/9.jpg
- slm####.####.com/video/8.jpg
- slm####.####.com/video/6.jpg
- slm####.####.com/wallpaper/2.jpg
- iq####.com/static/js/plugins/jquery.swipebox.js
- slm####.####.com/music/2.jpg
- slm####.####.com/video/12.jpg
HTTP POST requests:
- 2####.####.5:8765/sdkinitencode
Modified file system:
Creates the following files:
- /data/data/####/cache/webviewCacheChromium/f_00000a
- /data/data/####/cache/webviewCacheChromium/f_00000c
- /data/data/####/cache/webviewCacheChromium/f_00000b
- /data/data/####/cache/webviewCacheChromium/f_00000e
- /data/data/####/cache/webviewCacheChromium/f_00000d
- /data/data/####/cache/webviewCacheChromium/f_00000f
- /data/data/####/cache/webviewCacheChromium/f_000016
- /data/data/####/cache/webviewCacheChromium/f_000018
- /data/data/####/cache/webviewCacheChromium/f_000019
- /data/data/####/cache/webviewCacheChromium/data_3
- /data/data/####/cache/webviewCacheChromium/data_2
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_0
- /data/data/####/cache/webviewCacheChromium/f_000012
- /data/data/####/cache/webviewCacheChromium/f_000014
- /data/data/####/cache/webviewCacheChromium/f_000010
- /data/data/####/cache/webviewCacheChromium/f_000011
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000015
- /data/data/####/shared_prefs/WebViewSettings.xml
- /data/data/####/cache/webviewCacheChromium/f_000013
- /data/data/####/cache/webviewCacheChromium/f_000017
- /data/data/####/cache/webviewCacheChromium/f_00001b
- /data/data/####/cache/webviewCacheChromium/f_00001c
- /data/data/####/cache/webviewCacheChromium/f_00001a
- /data/data/####/cache/webviewCacheChromium/f_000009
- /data/data/####/cache/webviewCacheChromium/f_000008
- /data/data/####/cache/webviewCacheChromium/f_000001
- /data/data/####/cache/webviewCacheChromium/f_000003
- /data/data/####/cache/webviewCacheChromium/f_000002
- /data/data/####/cache/webviewCacheChromium/f_000005
- /data/data/####/cache/webviewCacheChromium/f_000004
- /data/data/####/cache/webviewCacheChromium/f_000007
- /data/data/####/cache/webviewCacheChromium/f_000006
- /data/data/####/databases/webview.db-journal
- /data/data/####/shared_prefs/System_Shell.xml
- /sdcard/Android/data/.com.sys/.tw3.jpg
- /data/data/####/shared_prefs/profile.xml.bak
- /data/data/####/shared_prefs/profile.xml
- /data/data/####/cache/webviewCacheChromium/index
Miscellaneous:
Contains functionality to send SMS messages automatically.
