Technical information
Malicious functions:
Sends SMS messages:
- 17600821234: <SMS Address> 2002-08-09 03:20:20 <SMS Content>
- 17600821234: 监控接收提示：您接到了该手机的监控 鑫爷QQ：771155535
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) bbs.e4a####.com:80
- TCP(TLS/1.0) and####.cli####.go####.com:443
DNS requests:
- and####.cli####.go####.com
- bbs.e4a####.com
- mt####.go####.com
HTTP GET requests:
- bbs.e4a####.com/
- bbs.e4a####.com/favicon.ico
- bbs.e4a####.com/forum.php?mod=####&action=####&fid=####&tid=####&mobile=...
- bbs.e4a####.com/forum.php?mod=####&aid=####&size=####&key=####&type=####
- bbs.e4a####.com/forum.php?mod=####&fid=####&mobile=####
- bbs.e4a####.com/forum.php?mod=####&tid=####&extra=p####&mobile=####
- bbs.e4a####.com/member.php?mod=####&action=####&mobile=####
- bbs.e4a####.com/misc.php?mod=####&update=####&idhash=####&mobile=####
- bbs.e4a####.com/static//image/mobile/images/pic_select.png
- bbs.e4a####.com/static/image/common/imageloading.gif
- bbs.e4a####.com/static/image/mobile/images/btn_s_bg.png
- bbs.e4a####.com/static/image/mobile/images/button_bg.png
- bbs.e4a####.com/static/image/mobile/images/header_bg.jpg
- bbs.e4a####.com/static/image/mobile/images/icon.png
- bbs.e4a####.com/static/image/mobile/images/icon_arrow.png
- bbs.e4a####.com/static/image/mobile/images/icon_back.png
- bbs.e4a####.com/static/image/mobile/images/icon_num.png
- bbs.e4a####.com/static/image/mobile/images/icon_top.png
- bbs.e4a####.com/static/image/mobile/images/icon_tu.png
- bbs.e4a####.com/static/image/mobile/images/login.png
- bbs.e4a####.com/static/image/mobile/images/login_on.png
- bbs.e4a####.com/static/image/mobile/images/logo.png
- bbs.e4a####.com/static/image/mobile/images/nav_b_line.png
- bbs.e4a####.com/static/image/mobile/images/pic_bg.jpg
- bbs.e4a####.com/static/image/mobile/images/qqlogin.png
- bbs.e4a####.com/static/image/mobile/style.css
- bbs.e4a####.com/static/js/mobile/common.js?v####
- bbs.e4a####.com/static/js/mobile/jquery.min.js?v####
- bbs.e4a####.com/uc_server/avatar.php?uid=####&size=####
HTTP POST requests:
- bbs.e4a####.com/member.php?mod=####&action=####&loginsubmit=####&loginha...
Miscellaneous:
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
Parses information from SMS messages.
Gains access to information about sent/received SMS messages.
