Technical information
Malicious functions:
Prompts to install third-party applications.
Network activity:
Connecting to:
- t####.####.net
- f####.####.info
- c####.####.com
- a####.####.com
- c####.####.com:7080
- po####.####.com
- trac####.####.net
HTTP GET requests:
- a####.####.com/config.get?app=####&keys=####&versionCode=####&versionName=####&um_ch=####&appPackageName=####&platformId=####&v=####&langCode=####&net...
- c####.####.com/group1/M02/14/AD/q4YBAFhvxpuAXa33AAAfzgL_fAw101.png
- c####.####.com/group1/M02/EE/20/qIYBAFiIfaaAf-O1AAAgMb2KLGE346.png
- c####.####.com:7080/group1/M01/D3/F4/p4YBAFeFQ1mAZDqqAAANWDRHYFU759.png
- a####.####.com/config?app=####&versionCode=####&versionName=####&um_ch=####&appPackageName=####&platformId=####&v=####&langCode=####&netWorkType=####&...
- trac####.####.net/340/9apps
- a####.####.com/client/check/task?app=####&versionCode=####&versionName=####&net=####&um_ch=####&appPackageName=####&platformId=####&v=####&langCode=##...
- c####.####.com:7080/group1/M02/B2/22/qYYBAFg_jCaASosuAAAgXlN5CsM765.png
- a####.####.com/v3/page/template?app=####&versionCode=####&versionName=####&um_ch=####&appPackageName=####&platformId=####&v=####&langCode=####&newClie...
- c####.####.com:7080/group1/M02/CB/A8/qoYBAFh_k-iAMWd8AAAeoowv5II975.png
- c####.####.com/group1/M01/13/2D/qIYBAFeviqSAOVbJAAAcjSJhAns653.png
- c####.####.com/group1/M02/7D/55/poYBAFhbUnaAYkVgAAAZ8dMcgnQ288.png
- c####.####.com/group1/M02/F7/F6/qYYBAFiBsRGACf_qAAAJP2oJTUI757.png
- po####.####.com/config?app=####&imei=####&versionCode=####&versionName=####&ver=####&um_ch=####&signx=####&appPackageName=####&platformId=####&langCod...
- c####.####.com:7080/group1/M02/AE/9D/poYBAFiEHwmAbleUAABpLUBZk1E814.gif
- a####.####.com/messageUser?app=####®istrationId=####®Only=####&versionCode=####&versioncode=####&senderId=####&versionName=####&um_ch=####&appPa...
- f####.####.info/mobawap/9apps_v3.apk
- c####.####.com/group1/M01/F8/DA/p4YBAFedEZKAc8hMAAAehnALYjo513.png
- c####.####.com/group1/M01/D2/D8/poYBAFeqZxiACY5lAAAO2SSCgdc568.png
- c####.####.com:7080/group1/M00/37/4C/pYYBAFgNDFCAZhU9AAAf7L-kJ94499.png
- c####.####.com:7080/group1/M02/8A/92/poYBAFhljs6AUGo8AAAlUxbjNTI702.png
- c####.####.com:7080/group1/M01/02/EB/qYYBAFeXU1WAeduvAAARcdv41WY963.png
- a####.####.com/pushmessage.json?app=####&versionCode=####&versioncode=####&versionName=####&um_ch=####&appPackageName=####&platformId=####&version=###...
- c####.####.com/group1/M00/72/52/poYBAFdds16AS0ifAAALZosR4ME630.png
HTTP POST requests:
- a####.####.com/user/check-increment-update.json?app=####&gzip=####&versionCode=####&versionName=####&um_ch=####&appPackageName=####&platformId=####&v=...
- t####.####.net/api/mobawap/new-api_in.php?app_name=####&api=####
Modified file system:
Creates the following files:
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/3dcfbbaec1801672974e3b063b72ced33f6ba7324cf382d29796adf9552acf6e.0.tmp
- /data/data/####/shared_prefs/####_preferences.xml
- /sdcard/Android/data/com.mobile.indiapp/cache/.nomedia
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/journal.tmp
- /data/data/####/shared_prefs/listpacks.xml
- /sdcard/Android/data/.nomedia
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/0bb950a2978603a1af86944e442b0a4da006535cd8ceeaafe3cba231deb5affb.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/3144f8b2d4749a06492170ca7ad0cad3915e034939afcddac0bf3762a67a93d9.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/7c27e9356ce1b742d2d99d30251dd6681113f15699ab77a49ee96b2d532a7067.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/5029013f312d42f21aa881e64df11f9377674221a32076cb2c6bf8e2e9976114.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/324a0f6533e1f9f7925abd9c92bd914e3ce9e08a7bcc4b86ce2ce8940999b840.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/ad636652d142c0b0685e25187fc777574e7295cecf546503ed00596986ad9d46.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/496f2b8308236024f05ba73e8ea479b50d3a3b8616b35c36a24cc0beca2a808d.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/ef25cdb4936f62bdbc310141c82f62a6b1cd374ef5614e0ee845acbf45454c4d.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/5c227e558540524cd022ed410e4ec40d177b38244551b1bae0d33b02beb8e940.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/ecc6698860032119ae41059f78cc76f750c99e18a92348bdb63f0827532eb5fd.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/d1cd37180584108f3cb0b98cd51ad79787d665d747f2e95d6dc932a9a6e1f948.0.tmp
- /sdcard/Systemckg/com.mobile.indiapp.apk
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/0cbd05385336ad5e633814444b6909e242596a8c88b8f1c80785572895c9cedd.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/77ee9cd5b17e4d4ae455d5ae2735a5da93667632da0cc0d6fa2dfa072605b286.0.tmp
- /sdcard/Android/data/com.mobile.indiapp/cache/image_manager_disk_cache/7f70e4bcc0f370a05fc8a0a91eedb07bbd0130c9bcf2a791e3c171d87c16830b.0.tmp
- /sdcard/Systemckg/tmp.apk
Miscellaneous:
Executes next shell scripts:
- sh
Contains functionality to send SMS messages automatically.
