Technical information
Malicious functions:
Removes its shortcut from the home screen.
Modified file system:
Creates the following files:
- /data/anr/traces.txt
- /data/data/####/cache001
- /data/data/####/com.dex
- /data/data/####/com.jar
- /data/data/####/encode.txt
- /data/data/####/i.db
- /data/data/####/one0
- /data/data/####/one1
- /data/data/####/one2
- /data/data/####/preference.xml
- /data/data/####/sux
- /data/data/####/temp20937601.dat
- /data/media/####/apk.a
- /data/media/####/tempapk
Miscellaneous:
Executes next shell scripts:
- <Package Folder>/files/one0 <Package>
- <Package Folder>/files/one0 <Package> cn.com.jdsc.congCS
- <Package Folder>/files/one1 <Package>
- <Package Folder>/files/one1 <Package> cn.com.jdsc.congCS
- <Package Folder>/files/one2 <Package>
- <Package Folder>/files/one2 <Package> cn.com.jdsc.congCS
- sh
- sh <Package Folder>/files/one2 <Package> cn.com.jdsc.congCS
- su
Uses elevated priveleges.
Gains access to interfaces of audio/video data writing.
Writes audio/video data.
Gains access to camera interface.
Gains access to information about installed applications.
Displays its own windows over windows of other applications.
Gains access to information about incoming/outgoing calls.
Gains access to information about sent/received SMS messages.
