Technical information
Malicious functions:
Removes its shortcut from the home screen.
Modified file system:
Creates the following files:
- /data/anr/traces.txt
- <Package Folder>/files/busybox
- <Package Folder>/files/log
- <Package Folder>/files/rcf
- <Package Folder>/files/rdf
Miscellaneous:
Executes next shell scripts:
- chmod 755 <Package Folder>/files/busybox
- chmod 755 <Package Folder>/files/rdf
- rm -r <Package Folder>/files/rdf
- sh -c export PATH=<Package Folder>/files/:$PATH && <Package Folder>/files/rdf >> /dev/null 2>&1
- sh -c export PATH=<Package Folder>/files/:$PATH && chmod 755 <Package Folder>/files/busybox >> /dev/null 2>&1
- sh -c export PATH=<Package Folder>/files/:$PATH && chmod 755 <Package Folder>/files/rdf >> /dev/null 2>&1
- sh -c export PATH=<Package Folder>/files/:$PATH && export PATH=<Package Folder>/files/busybox:$PATH >> /dev/null 2>&1
- sh -c export PATH=<Package Folder>/files/:$PATH && rm -r <Package Folder>/files/rdf >> /dev/null 2>&1
Loads the following dynamic libraries:
- libsecurityservice
- securityservice
Gains access to telephone information (number, imei, etc.).
Adds tasks to the system scheduler.
Displays its own windows over windows of other applications.
