Technical information
Malicious functions:
Sends SMS messages:
- 12114: yzw#####A
Network activity:
Connecting to:
- s####.####.com
- u####.####.com
- kangail####.cn
- u####.####.cn
- p####.####.com
- s####.####.cn
- pass####.####.cn
- u####.####.cn:8080
- b####.####.cn
HTTP GET requests:
- p####.####.com/apiTvShow/itf/getallurlbyname?name=####
- pass####.####.cn/client/authRequest
- kangail####.cn/chengren8.jpg
- kangail####.cn/chengren6.jpg
- kangail####.cn/chengren4.jpg
- b####.####.cn/chongzhic1.jpg
- kangail####.cn/chengren2.jpg
- s####.####.com/versioncheck.aspx?
- s####.####.cn/GetFeeData.aspx?iswifi=####
- s####.####.cn/getconfig.aspx?
- kangail####.cn/chengren7.jpg
- kangail####.cn/chengren5.jpg
- kangail####.cn/chengren3.jpg
- s####.####.cn/versioncheck.aspx?
- kangail####.cn/chengren1.jpg
- s####.####.com/getconfig.aspx?
- p####.####.com/apiTvShow/citicpay/getwx
HTTP POST requests:
- u####.####.com/union/api/reg.do
- u####.####.cn:8080/openapi/services/video/page
- u####.####.com/union/api/getonlineparam.do
- u####.####.cn/openapi/services/video/page
Modified file system:
Creates the following files:
- /data/data/####/cache/picasso-cache/a5a611d6a3559b67889026fd13976394.0.tmp
- /data/data/####/cache/picasso-cache/a5a611d6a3559b67889026fd13976394.1.tmp
- /data/data/####/cache/picasso-cache/342297f5b183a4dbf021505c17335372.0.tmp
- /data/data/####/cache/picasso-cache/37cdb12a71113107fa60a96ed5ab28f3.0.tmp
- /data/data/####/shared_prefs/custom_pref_unionsdk.xml
- /data/data/####/shared_prefs/wb.xml.bak
- /data/data/####/cache/picasso-cache/23425acfccdaf1409c4f85041e4e0003.1.tmp
- /data/data/####/cache/picasso-cache/66f5415b68da32e28c55aadc9026594c.0.tmp
- /data/data/####/libats.lock
- /data/data/####/cache/picasso-cache/d31bd64ecd13d3886424a71ecf50601f.0.tmp
- /data/data/####/cache/picasso-cache/83d10994992665ed7628f18134cdf0ff.0.tmp
- /data/data/####/cache/picasso-cache/23425acfccdaf1409c4f85041e4e0003.0.tmp
- /data/data/####/cache/picasso-cache/e2cf43fe9118c74afa4621bc17978a44.0.tmp
- /data/data/####/cache/picasso-cache/e2cf43fe9118c74afa4621bc17978a44.1.tmp
- /data/data/####/shared_prefs/ui.xml
- /data/data/####/cache/picasso-cache/83d10994992665ed7628f18134cdf0ff.1.tmp
- /data/data/####/cache/picasso-cache/37cdb12a71113107fa60a96ed5ab28f3.1.tmp
- /data/data/####/cache/picasso-cache/e801211c158718e07f02290220ab1881.1.tmp
- /data/data/####/databases/db_feeList
- /data/data/####/shared_prefs/device_id.xml
- /data/data/####/cache/picasso-cache/66f5415b68da32e28c55aadc9026594c.1.tmp
- /data/data/####/cache/picasso-cache/342297f5b183a4dbf021505c17335372.1.tmp
- /data/data/####/cache/picasso-cache/journal.tmp
- /data/data/####/databases/db_feeList-journal
- /data/data/####/shared_prefs/wb.xml
- /data/data/####/shared_prefs/ui.xml.bak
- /data/data/####/cache/picasso-cache/d31bd64ecd13d3886424a71ecf50601f.1.tmp
- /data/data/####/cache/picasso-cache/e801211c158718e07f02290220ab1881.0.tmp
Miscellaneous:
Contains functionality to send SMS messages automatically.
