Technical information
Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) gan####.com:80
DNS requests:
- gan####.com
HTTP GET requests:
- gan####.com/get-functions.php?UID=####&Password=####
- gan####.com/get.php?UID=####&Provider=####&Phone_Number=####&Coordinates...
Modified file system:
Creates the following files:
- /data/anr/traces.txt
- <Package Folder>/shared_prefs/<Package>_preferences.xml
Miscellaneous:
Gains access to interfaces of audio/video data writing.
Gains access to geolocation.
Gains access to network information.
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
