Technical information
Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- mobilep####.com
- prelan####.net
- and####.####.com
- a####.####.com
- trk####.mobi
- down####.####.com
- 00####.com:61070
HTTP GET requests:
- prelan####.net/adult/dating/hardcore/en/1/v1/css/app.css
- prelan####.net/adult/dating/hardcore/en/1/v1/images/logo.png
- prelan####.net/adult/dating/hardcore/en/1/v1/images/girl_2.jpg
- prelan####.net/adult/dating/hardcore/en/1/v1/bower_components/foundation...
- prelan####.net/adult/dating/hardcore/en/1/v1/slider/slick/slick.css
- prelan####.net/adult/dating/hardcore/en/1/v1/slider/slick/slick.js
- down####.####.com/js/2016072.data
- prelan####.net/adult/dating/hardcore/en/1/v1/slider/slick/ajax-loader.gif
- prelan####.net/adult/dating/hardcore/en/1/v1/bower_components/jquery/dis...
- trk####.mobi/offer/29247%7C11910?data3=####&data4=####&data5=####
- prelan####.net/adult/dating/hardcore/en/1/v1/bower_components/what-input...
- mobilep####.com/?flux_fts=####&flux_fn=####&flux_cost=####&clickID=####&...
- prelan####.net/adult/dating/hardcore/en/1/v1/slider/slick/slick-theme.css
- prelan####.net/adult/dating/hardcore/en/1/v1/images/girl_1.jpg
- down####.####.com/js/2016071.data
- prelan####.net/adult/dating/hardcore/en/1/v1/images/girl_3.jpg
- prelan####.net/adult/dating/hardcore/en/1/v1/step1.html
- prelan####.net/adult/dating/hardcore/en/1/v1/js/app.js
- prelan####.net/adult/dating/hardcore/en/1/v1/featherlight/release/feathe...
- prelan####.net/adult/dating/hardcore/en/1/v1/images/girl_4.JPG
HTTP POST requests:
- and####.####.com/rqd/async
- a####.####.com/app_logs
- 00####.com:61070/wall/version_V2/version
Miscellaneous:
Uses special library to hide executable bytecode.
Contains functionality to send SMS messages automatically.
