Technical information
Malicious functions:
Executes code of the following detected threats:
- Tool.Rooter.39
Network activity:
Connecting to:
- d####.####.com
- boj####.com:8080
- boj####.com
- ihe####.com:8080
HTTP GET requests:
- d####.####.com/wjamm/wuma/wuma32.jpg
- d####.####.com/wjamm/wuma/wuma39.jpg
- d####.####.com/wjamm/wuma/wuma35.jpg
- d####.####.com/wjamm/youbo/youbo14.jpg
- d####.####.com/wjamm/mp4/youbo17.mp4
- d####.####.com/wjamm/json/qiangxian.json
- d####.####.com/wjamm/youbo/youbo15.jpg
- d####.####.com/wjamm/youbo/youbo16.jpg
- d####.####.com/wjamm/wuma/wuma37.jpg
- d####.####.com/wjamm/wuma/wuma33.jpg
- d####.####.com/wjamm/wuma/wuma34.jpg
- d####.####.com/wjamm/wuma/wuma38.jpg
- d####.####.com/wjamm/json/wuma.json
- boj####.com:8080/channel/url/getallurlbyname?name=####
- d####.####.com/wjamm/youbo/youbo19.jpg
- boj####.com/channel/prices/get?channel=####
- ihe####.com:8080/outchannel/vip/356507059351895
- d####.####.com/wjamm/top/banner2.jpg
- d####.####.com/wjamm/top/banner1.jpg
- d####.####.com/wjamm/youbo/youbo18.jpg
- d####.####.com/wjamm/youbo/youbo13.jpg
- d####.####.com/wjamm/json/top.json
- d####.####.com/wjamm/wuma/wuma36.jpg
- d####.####.com/wjamm/youbo/youbo17.jpg
- d####.####.com/wjamm/youbo/youbo20.jpg
- d####.####.com/wjamm/wuma/wuma40.jpg
- d####.####.com/wjamm/wuma/wuma31.jpg
Droppers:
Downloaded by the following detected threats from the Web:
- Android.Packed.329
Modified file system:
Creates the following files:
- /data/data/####/cache/picasso-cache/a7b3c11367d326e3d46f7212eb5570bb.0.tmp
- /data/data/####/cache/picasso-cache/bee20257a41dfda24eb697f9b8b6ddf8.1.tmp
- /data/data/####/cache/picasso-cache/80c30677b0c6ba7ba4603345b7dac94f.1.tmp
- /data/data/####/cache/picasso-cache/62396a7cdb90008234f9da7a4ed736c5.0.tmp
- /data/data/####/cache/picasso-cache/a7b3c11367d326e3d46f7212eb5570bb.1.tmp
- /data/data/####/cache/picasso-cache/d149c99e59fba942ce634a1551c3ab2a.0.tmp
- /data/data/####/databases/cc/cc.db
- /data/data/####/cache/picasso-cache/5c0d57ebf266909e987cc93afde09fac.0.tmp
- /data/data/####/cache/picasso-cache/61723652c3a39ff916c37d520a24ae0c.1.tmp
- /data/data/####/cache/picasso-cache/549592e6dc3c1a414192f7659ea3067b.1.tmp
- /data/data/####/cache/picasso-cache/d6c75661b286ac772bfabdc01ff15dca.0.tmp
- /data/data/####/wdujf.jar
- /data/data/####/cache/picasso-cache/29dda0177c28fbb7a9af4bb913304b36.1.tmp
- /data/data/####/cache/picasso-cache/29dda0177c28fbb7a9af4bb913304b36.0.tmp
- /data/data/####/cache/picasso-cache/1bb521c0ce2ee45bc5dc2dcf656741c5.0.tmp
- /data/data/####/databases/cc/cc.db-journal
- /data/data/####/shared_prefs/umeng_general_config.xml
- /data/data/####/cache/picasso-cache/d6c75661b286ac772bfabdc01ff15dca.1.tmp
- /data/data/####/cache/picasso-cache/62396a7cdb90008234f9da7a4ed736c5.1.tmp
- /data/data/####/cache/picasso-cache/80fdb52322d998b7fa9c4ad2cf73a28e.0.tmp
- /data/data/####/cache/picasso-cache/dca086f6c417556781a22b6cb648286d.0.tmp
- /data/data/####/cache/picasso-cache/d149c99e59fba942ce634a1551c3ab2a.1.tmp
- /data/data/####/cache/picasso-cache/549592e6dc3c1a414192f7659ea3067b.0.tmp
- /data/data/####/cache/picasso-cache/c5b0effdb33eda527fdb56ef567db733.1.tmp
- /data/data/####/cache/picasso-cache/032023fc3302e00bf97c74c59ee09ad9.0.tmp
- /data/data/####/cache/picasso-cache/032023fc3302e00bf97c74c59ee09ad9.1.tmp
- /data/data/####/cache/picasso-cache/861e83437eeed507e613e40934d33deb.1.tmp
- /data/data/####/cache/picasso-cache/7397bba977ac6d4fbe42a7605016a119.0.tmp
- /data/data/####/cache/picasso-cache/bfbc93c83fe13890de88de3fdf3b2689.1.tmp
- /data/data/####/cache/picasso-cache/5c0d57ebf266909e987cc93afde09fac.1.tmp
- /data/data/####/shared_prefs/config.xml
- /data/data/####/cache/picasso-cache/c5b0effdb33eda527fdb56ef567db733.0.tmp
- /data/data/####/cache/picasso-cache/bee20257a41dfda24eb697f9b8b6ddf8.0.tmp
- /data/data/####/cache/picasso-cache/37939f5488c881717370d658f986ce52.1.tmp
- /data/data/####/cache/picasso-cache/725e925742c74eae79713ca7d20adad6.0.tmp
- /data/data/####/cache/picasso-cache/journal.tmp
- /data/data/####/cache/picasso-cache/7397bba977ac6d4fbe42a7605016a119.1.tmp
- /data/data/####/cache/picasso-cache/725e925742c74eae79713ca7d20adad6.1.tmp
- /data/data/####/cache/picasso-cache/37939f5488c881717370d658f986ce52.0.tmp
- /data/data/####/cache/picasso-cache/861e83437eeed507e613e40934d33deb.0.tmp
- /data/data/####/cache/picasso-cache/80fdb52322d998b7fa9c4ad2cf73a28e.1.tmp
- /data/data/####/cache/picasso-cache/80c30677b0c6ba7ba4603345b7dac94f.0.tmp
- /data/data/####/cache/picasso-cache/bfbc93c83fe13890de88de3fdf3b2689.0.tmp
- /data/data/####/cache/picasso-cache/61723652c3a39ff916c37d520a24ae0c.0.tmp
- /data/data/####/cache/picasso-cache/dca086f6c417556781a22b6cb648286d.1.tmp
- /data/data/####/cache/picasso-cache/1bb521c0ce2ee45bc5dc2dcf656741c5.1.tmp
Miscellaneous:
Contains functionality to send SMS messages automatically.
