Technical information
Malicious functions:
Sends SMS messages:
- 13738641882: c
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) x####.tc.qq.com:80
- TCP(HTTP/1.1) a####.qq.com:80
- TCP(HTTP/1.1) w####.qq.com:80
- TCP(HTTP/1.1) p####.tc.qq.com:80
- TCP(HTTP/1.1) isds####.qq.com:80
- TCP(HTTP/1.1) ping####.qq.com:80
- TCP(HTTP/1.1) www.m####.com:80
- TCP(TLS/1.0) www.m####.com:443
DNS requests:
- 3####.qq.com
- a####.qq.com
- a####.qq.com
- a.m####.com
- cgi.con####.qq.com
- i.g####.cn
- isds####.qq.com
- m####.q####.qq.com
- ping####.qq.com
- qzones####.g####.cn
- w####.qq.com
- www.m####.com
HTTP GET requests:
- a####.qq.com/
- isds####.qq.com/cgi-bin/r.cgi?flag1=####&flag2=####&flag3=####&flag4=###...
- p####.tc.qq.com/open/mobile/myapp_touch/css/all.css?max_age=####
- p####.tc.qq.com/open/mobile/myapp_touch/global.js?max_age=####&v=####
- p####.tc.qq.com/open/mobile/myapp_touch/img/basic.png
- p####.tc.qq.com/open/mobile/myapp_touch/img/sprites.png
- ping####.qq.com/pingd?tz=####&vs=####&dm=####&url=####&rdm=####&rurl=###...
- w####.qq.com/msgrd?v=####&uin=####&site=####&menu=####
- www.m####.com/cgi-bin/mapp/mapp_home_qzone?type=####&pageNo=####&pageSiz...
- www.m####.com/cgi-bin/mapp/mapp_info?type=####&appid=####&packageName=##...
- www.m####.com/cgi-bin/mapp_apptrace?appid_via_act_net_time_sender=####&r...
- www.m####.com/forward/a/45592?g_f=####
- www.m####.com/h/single.jsp?appid=####&g_f=####
- x####.tc.qq.com/open/app_icon/00/69/26/48/100692648_100_m.png
- x####.tc.qq.com/open/app_icon/00/89/99/46/100899946_100_m.png
- x####.tc.qq.com/open/app_icon/01/07/08/98/1101070898_100_m.png
- x####.tc.qq.com/open/app_icon/01/69/17/19/1101691719_100_m.png
- x####.tc.qq.com/open/app_icon/04/56/12/49/1104561249_100_m.png
- x####.tc.qq.com/open/app_icon/05/29/67/40/1105296740_100_m.png
- x####.tc.qq.com/open/appstore/imgupload/201808/1476393771_15356865741941...
- x####.tc.qq.com/open/appstore/imgupload/201808/750761767_153568585574727...
- x####.tc.qq.com/web/webapp_webmarket/android/images/favicon.ico
Miscellaneous:
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
Parses information from SMS messages.
Gains access to information about sent/received SMS messages.
