Technical information
Malicious functions:
Sends SMS messages:
- 13546139346: <SMS Address>-><SMS Content>
- 13546139346: 安逸制作,回复com#false关闭com#true开启, 版本18 <System Property>
- 13546139346: 拦截服务已启动,软件到期时间9999-01-15 00:50:00
Removes its shortcut from the home screen.
Gains access to the ITelephony private interface.
Intercepts incoming SMS messages and terminates the process of their transmission to handlers of other applications.
Modified file system:
Creates the following files:
- /data/data/####/.classes.dex
- /data/data/####/.kdpdata.so
Miscellaneous:
Loads the following dynamic libraries:
- kdp
- libkwscmm
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
Parses information from SMS messages.
