SHA1 hashes:
- efdca4034c709a2017d96bbbaec0d6c801068dbf
Description
A clicker trojan. This trojan is distributed as a module that is loaded and executed by other trojans. It downloads websites to WebView and then simulates user actions using JavascriptInterface and JavaScript code. It is controlled from the hxxps[:]//newsadapi[.]zhuifengzhe[.]top server.