Technical information
Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- w####.####.com
- f####.####.cn
HTTP GET requests:
- f####.####.cn/focus/conf?device_type=####&height=####&dpi=####&android_i...
- f####.####.cn/focus/st?status=####&cid=####&source=####&requestid=####
HTTP POST requests:
- f####.####.cn/focus/req
- f####.####.cn/focus/atex
- w####.####.com/adx.php?c=####&ext=####
Modified file system:
Creates the following files:
- /sdcard/Download/images/journal.tmp
- /data/data/####/files/yw.db
- /data/data/####/files/wca.jar
- /data/data/####/files/embqjvysptvtryhmjusexzphocsoidqap
- /data/data/####/shared_prefs/####.xml
- /sdcard/Download/images/journal
Miscellaneous:
Executes next shell scripts:
- ping -c 2 -w 5 f####.####.cn
- cat /sys/class/net/wlan0/address
Contains functionality to send SMS messages automatically.
