Technical information
Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) ssl.gst####.com:443
- TCP(TLS/1.0) www.go####.nl:443
- TCP(TLS/1.0) api.tele####.org:443
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) www.gst####.com:443
DNS requests:
- api.tele####.org
- mt####.go####.com
- ssl.gst####.com
- www.go####.com
- www.go####.nl
- www.gst####.com
Modified file system:
Creates the following files:
- <Package Folder>/shared_prefs/android.os.sadas45sg6d4f6g696sadgfasdgf4.xml
- <SD-Card>/Android/####/.nomedia
- <SD-Card>/Android/####/<SMS Address>.sm
Miscellaneous:
Loads the following dynamic libraries:
- monodroid
Uses administrator priveleges.
Gains access to information about active device administrators.
Displays its own windows over windows of other applications.
Gains access to information about sent/received SMS messages.
