Technical information
Malicious functions:
Blocks access to graphical screen interface.
Network activity:
Connecting to:
- o####.####.cn
HTTP POST requests:
- o####.####.cn/8/find
Modified file system:
Creates the following files:
- <Package Folder>/shared_prefs/bmob_sp.xml
- <Package Folder>/shared_prefs/bmob_sp.xml.bak
Miscellaneous:
Uses the following algorithms to encrypt data:
- AES-CBC-PKCS5Padding
- DES
Uses the following algorithms to decrypt data:
- AES-CBC-PKCS5Padding
- DES
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
