Technical information
Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- 1####.####.com
- 4####.####.us
HTTP GET requests:
- 1####.####.com/?utm_medium=####&utm_campaign=####&1=####&cid=####
- 4####.####.us/
Modified file system:
Creates the following files:
- <Package Folder>/cache/####/data_0
- <Package Folder>/cache/####/data_1
- <Package Folder>/cache/####/data_2
- <Package Folder>/cache/####/data_3
- <Package Folder>/cache/####/index
- <Package Folder>/databases/webview.db-journal
- <Package Folder>/databases/webviewCookiesChromium.db-journal (deleted)
- <Package Folder>/databases/webviewCookiesChromiumPrivate.db-journal
- <Package Folder>/databases/webviewCookiesChromiumPrivate.db-journal (deleted)
- <Package Folder>/shared_prefs/dobao_prefs.xml
- <SD-Card>/Android/####/.nomedia
- <SD-Card>/Android/####/journal.tmp
