Technical information
Malicious functions:
Sends SMS messages:
- 12114: yzw#####A
Network activity:
Connecting to:
- s####.####.com
- t####.####.cn:1088
- u####.####.cn
- s####.####.cn
- pass####.####.cn
- u####.####.cn:8080
- b####.####.cn
- t####.####.cn
HTTP GET requests:
- t####.####.cn/tiyan18.jpg
- t####.####.cn/tiyan35a.jpg
- t####.####.cn/tiyan1.jpg
- t####.####.cn/tiyan13.jpg
- t####.####.cn/tiyan35.mp4
- s####.####.com/versioncheck.aspx?
- t####.####.cn/tiyan33a.jpg
- t####.####.cn/tiyan36a.jpg
- t####.####.cn:1088/tiyan27w.jpg
- pass####.####.cn/client/authRequest
- t####.####.cn/tiyan29q.jpg
- t####.####.cn/tiyan28q.jpg
- t####.####.cn/tiyan33.mp4
- s####.####.com/GetFeeData.aspx?iswifi=####
- t####.####.cn/tiyan31a.jpg
- t####.####.cn/tiyan19.jpg
- t####.####.cn/tiyan20.jpg
- s####.####.com/getconfig.aspx?
- b####.####.cn/chongzhic1.jpg
- t####.####.cn/tiyan25.jpg
- s####.####.cn/GetFeeData.aspx?iswifi=####
- s####.####.cn/versioncheck.aspx?
- t####.####.cn/tiyan37a.jpg
- t####.####.cn/tiyan34a.jpg
- t####.####.cn/tiyan30a.jpg
- t####.####.cn/tiyan22.jpg
- t####.####.cn/tiyan24.jpg
- t####.####.cn/tiyan32a.jpg
- t####.####.cn/tiyan3.jpg
- s####.####.cn/getconfig.aspx?
- t####.####.cn/tiyan21.jpg
HTTP POST requests:
- u####.####.cn:8080/openapi/services/video/page
- u####.####.cn/openapi/services/video/page
Modified file system:
Creates the following files:
- /data/data/####/cache/picasso-cache/7a8dc7449bbd26b2126457527b92c8b0.0.tmp
- /data/data/####/cache/picasso-cache/a0c623d5578e1b4bcf0169a983c98425.1.tmp
- /data/data/####/cache/picasso-cache/37cdb12a71113107fa60a96ed5ab28f3.0.tmp
- /data/data/####/cache/picasso-cache/7ee9badd643f4bb262bd84f9fa7875a2.0.tmp
- /data/data/####/cache/picasso-cache/fd00b739532f3a2a2fb942b4b58813ea.0.tmp
- /data/data/####/cache/picasso-cache/1233bea9440b90e7d5895dc1bf7bf5ef.1.tmp
- /data/data/####/cache/picasso-cache/f5fc828eb8a4336484fded65f057b150.1.tmp
- /data/data/####/cache/picasso-cache/ea22768be918752efebb944c063cc10a.0.tmp
- /data/data/####/cache/picasso-cache/782b7ec701325ed033a6bc7c5a4ca491.0.tmp
- /data/data/####/cache/picasso-cache/a2ab440fd9dc6e519cd38ed06262b30c.0.tmp
- /data/data/####/cache/picasso-cache/f68205268f6a6ab00a44f2a1792c4664.0.tmp
- /data/data/####/cache/picasso-cache/ea22768be918752efebb944c063cc10a.1.tmp
- /data/data/####/cache/picasso-cache/ba7fb34194f5dafe09437ba7be0e344a.1.tmp
- /data/data/####/cache/picasso-cache/7ee9badd643f4bb262bd84f9fa7875a2.1.tmp
- /data/data/####/cache/picasso-cache/aae0ebccfa1c8595319accf325c3c772.0.tmp
- /data/data/####/libats.lock
- /data/data/####/cache/picasso-cache/261573e04cec01f728876c4197850f6a.0.tmp
- /data/data/####/cache/picasso-cache/4a8a835a62c55f291f2a72af4291bb9b.1.tmp
- /data/data/####/cache/picasso-cache/f68205268f6a6ab00a44f2a1792c4664.1.tmp
- /data/data/####/cache/picasso-cache/782b7ec701325ed033a6bc7c5a4ca491.1.tmp
- /data/data/####/cache/picasso-cache/3cc1f7d8aa859a00b9a017baacc47dd7.1.tmp
- /data/data/####/cache/picasso-cache/aae0ebccfa1c8595319accf325c3c772.1.tmp
- /data/data/####/cache/picasso-cache/c11c79521ea1a8ea15dd979c79769be8.1.tmp
- /data/data/####/cache/picasso-cache/aaff9dcb644a4685077f5ba7ec112237.1.tmp
- /data/data/####/cache/picasso-cache/a2ab440fd9dc6e519cd38ed06262b30c.1.tmp
- /data/data/####/shared_prefs/ui.xml
- /data/data/####/cache/picasso-cache/4a8a835a62c55f291f2a72af4291bb9b.0.tmp
- /data/data/####/cache/picasso-cache/9d720364f6e1ec54d338d95e5d498ed6.0.tmp
- /data/data/####/cache/picasso-cache/a6823c1b25e123dd81bfe3ca66f25c17.0.tmp
- /data/data/####/cache/picasso-cache/d7295848c26f39818d7898fb595defd8.0.tmp
- /data/data/####/cache/picasso-cache/37cdb12a71113107fa60a96ed5ab28f3.1.tmp
- /data/data/####/cache/picasso-cache/c11c79521ea1a8ea15dd979c79769be8.0.tmp
- /data/data/####/cache/picasso-cache/ba7fb34194f5dafe09437ba7be0e344a.0.tmp
- /data/data/####/shared_prefs/wb.xml.bak
- /data/data/####/databases/db_feeList
- /data/data/####/shared_prefs/device_id.xml
- /data/data/####/cache/picasso-cache/aaff9dcb644a4685077f5ba7ec112237.0.tmp
- /data/data/####/cache/picasso-cache/3cc1f7d8aa859a00b9a017baacc47dd7.0.tmp
- /data/data/####/cache/picasso-cache/f5fc828eb8a4336484fded65f057b150.0.tmp
- /data/data/####/cache/picasso-cache/a0c623d5578e1b4bcf0169a983c98425.0.tmp
- /data/data/####/cache/picasso-cache/9e0c5b08a908e7a76b78d71d7b15c066.1.tmp
- /data/data/####/cache/picasso-cache/a6823c1b25e123dd81bfe3ca66f25c17.1.tmp
- /data/data/####/cache/picasso-cache/journal.tmp
- /data/data/####/cache/picasso-cache/9e0c5b08a908e7a76b78d71d7b15c066.0.tmp
- /data/data/####/databases/db_feeList-journal
- /data/data/####/shared_prefs/wb.xml
- /data/data/####/shared_prefs/ui.xml.bak
- /data/data/####/cache/picasso-cache/d7295848c26f39818d7898fb595defd8.1.tmp
- /data/data/####/cache/picasso-cache/1233bea9440b90e7d5895dc1bf7bf5ef.0.tmp
- /data/data/####/cache/picasso-cache/7a8dc7449bbd26b2126457527b92c8b0.1.tmp
- /data/data/####/cache/picasso-cache/9d720364f6e1ec54d338d95e5d498ed6.1.tmp
- /data/data/####/cache/picasso-cache/261573e04cec01f728876c4197850f6a.1.tmp
- /data/data/####/cache/picasso-cache/fd00b739532f3a2a2fb942b4b58813ea.1.tmp
Miscellaneous:
Contains functionality to send SMS messages automatically.
