Technical information
Malicious functions:
Sends SMS messages:
- 12114: yzw#####A
- 13738015114: ####A
Network activity:
Connecting to:
- s####.####.com
- c####.####.la
- t####.####.cn:1088
- i####.####.com
- a####.####.la
- u####.####.cn
- s####.####.cn
- pass####.####.cn
- de####.####.cn
- u####.####.cn:8080
- b####.####.cn
- t####.####.cn
HTTP GET requests:
- t####.####.cn/sousuo_1_16.jpg
- t####.####.cn/sousuo_1_8.jpg
- t####.####.cn/luntan2.jpg
- t####.####.cn/sousuo_1_2.jpg
- i####.####.com/service/getIpInfo.php?ip=####
- t####.####.cn/sousuo_1_4.jpg
- s####.####.com/versioncheck.aspx?
- t####.####.cn/tiyan27w.jpg
- s####.####.cn/getconfig.aspx?
- t####.####.cn/luntan6.jpg
- t####.####.cn/sousuo_1_7.jpg
- t####.####.cn/sousuo_1_12.jpg
- s####.####.cn/versioncheck.aspx?
- pass####.####.cn/client/authRequest
- t####.####.cn/tiyan28q.jpg
- s####.####.com/GetFeeData.aspx?iswifi=####
- t####.####.cn/sousuo_1_1.jpg
- t####.####.cn/sousuo_1_5.jpg
- s####.####.com/getconfig.aspx?
- b####.####.cn/chongzhic1.jpg
- t####.####.cn/sousuo_1_13.jpg
- t####.####.cn/luntan10.jpg
- t####.####.cn/luntan1.jpg
- c####.####.la/sdk_config.js
- t####.####.cn/luntan7.jpg
- t####.####.cn/sousuo_1_15.jpg
- t####.####.cn/luntan4.jpg
- t####.####.cn/sousuo_1_10.jpg
- t####.####.cn/sousuo_1_14.jpg
- t####.####.cn/luntan9.jpg
- t####.####.cn/sousuo_1_6.jpg
- t####.####.cn:1088/tiyan29q.jpg
- t####.####.cn/luntan8.jpg
- t####.####.cn/sousuo_1_9.jpg
- t####.####.cn/luntan3.jpg
- s####.####.cn/GetFeeData.aspx?iswifi=####
- t####.####.cn/sousuo_1_11.jpg
- t####.####.cn/sousuo_1_3.jpg
- t####.####.cn/luntan5.jpg
HTTP POST requests:
- u####.####.cn:8080/openapi/services/video/page
- u####.####.cn/openapi/services/videoType/page
- u####.####.cn/openapi/services/video/page
- u####.####.cn/openapi/services/video/videoSearch
- c####.####.la/update.ashx
- a####.####.la/PayApi/Index?ts=####&rs=####&pid=####
- de####.####.cn/index.php?s=####
Modified file system:
Creates the following files:
- /data/data/####/cache/picasso-cache/e6a59ed3a37d7116a0e7f12e71ca3ef4.1.tmp
- /data/data/####/cache/picasso-cache/be7ca584b6ee1232da95ade820781613.0.tmp
- /data/data/####/cache/picasso-cache/3a22151760c7f1df55e4148f47a4fa40.1.tmp
- /data/data/####/cache/picasso-cache/6883f9b6b2bc6ee5fce6ebdc66402eea.1.tmp
- /data/data/####/cache/picasso-cache/37cdb12a71113107fa60a96ed5ab28f3.0.tmp
- /data/data/####/cache/picasso-cache/db78e2e95f14deb4902d68f5748121cc.1.tmp
- /data/data/####/cache/picasso-cache/770e1c3d171b889987033a8f664349bb.1.tmp
- /data/data/####/shared_prefs/wb.xml.bak
- /data/data/####/databases/db_feeList-journal
- /data/data/####/cache/picasso-cache/ac9301a0e62f1d0b6f2eab4256edfe11.0.tmp
- /data/data/####/shared_prefs/device_id.xml.xml
- /data/data/####/cache/picasso-cache/f5fc828eb8a4336484fded65f057b150.1.tmp
- /data/data/####/cache/picasso-cache/3a22151760c7f1df55e4148f47a4fa40.0.tmp
- /data/data/####/cache/picasso-cache/d64da601c532cec2f89bdd689e54fe1f.1.tmp
- /data/data/####/cache/picasso-cache/e169cccb4d32348f8a2305e95c8a6518.0.tmp
- /data/data/####/cache/picasso-cache/c814dc7c66f81490028fe26685e5c574.1.tmp
- /data/data/####/cache/picasso-cache/db78e2e95f14deb4902d68f5748121cc.0.tmp
- /data/data/####/cache/picasso-cache/d64da601c532cec2f89bdd689e54fe1f.0.tmp
- /data/data/####/cache/picasso-cache/be7ca584b6ee1232da95ade820781613.1.tmp
- /data/data/####/cache/picasso-cache/d32a28c90bbbdd4354ee7837fc880f10.1.tmp
- /data/data/####/cache/picasso-cache/007339440391fe60d6178ef3c35193ce.1.tmp
- /data/data/####/cache/picasso-cache/dc1bdcdb9891aaa12366a42841f2c37f.1.tmp
- /data/data/####/cache/picasso-cache/7b74f1a68b072f7bf9713b7e922bdb52.1.tmp
- /data/data/####/cache/picasso-cache/d7d7eb76c2a1acaa2e51687025b81304.1.tmp
- /data/data/####/libats.lock
- /data/data/####/cache/picasso-cache/d0e1c04e9113ca2b9f588cdc808b7418.0.tmp
- /data/data/####/cache/picasso-cache/f5fc828eb8a4336484fded65f057b150.0.tmp
- /data/data/####/cache/picasso-cache/c814dc7c66f81490028fe26685e5c574.0.tmp
- /data/data/####/cache/picasso-cache/3cc1f7d8aa859a00b9a017baacc47dd7.1.tmp
- /data/data/####/cache/picasso-cache/c69278038827ab2249fbb51d4ed987aa.0.tmp
- /data/data/####/cache/picasso-cache/d7d7eb76c2a1acaa2e51687025b81304.0.tmp
- /data/data/####/cache/picasso-cache/9d51d98356ba327edc2f80ec38d6281e.1.tmp
- /data/data/####/cache/picasso-cache/007339440391fe60d6178ef3c35193ce.0.tmp
- /data/data/####/cache/picasso-cache/9c1323b25ba418a5e320cd810ddc4f49.1.tmp
- /data/data/####/cache/picasso-cache/88c4e7b704304888e6389b20d59ea2ff.1.tmp
- /data/data/####/shared_prefs/ui.xml
- /data/data/####/cache/picasso-cache/7b74f1a68b072f7bf9713b7e922bdb52.0.tmp
- /data/data/####/cache/picasso-cache/a6823c1b25e123dd81bfe3ca66f25c17.0.tmp
- /data/data/####/cache/picasso-cache/dc1bdcdb9891aaa12366a42841f2c37f.0.tmp
- /data/data/####/cache/picasso-cache/0bf7c91c216ef4ec1100720447642743.0.tmp
- /data/data/####/cache/picasso-cache/37cdb12a71113107fa60a96ed5ab28f3.1.tmp
- /data/data/####/shared_prefs/sharepafrence.xml
- /data/data/####/cache/picasso-cache/9d51d98356ba327edc2f80ec38d6281e.0.tmp
- /data/data/####/cache/picasso-cache/6eb1b9efc2f06c857edaf9fd285ef2b9.0.tmp
- /data/data/####/cache/picasso-cache/d32a28c90bbbdd4354ee7837fc880f10.0.tmp
- /data/data/####/cache/picasso-cache/de1896b25a6457a7e52b317fb121fc3e.1.tmp
- /data/data/####/databases/db_feeList
- /data/data/####/shared_prefs/device_id.xml
- /data/data/####/cache/picasso-cache/0d3bac1780404dbc31e44ad8de7493cb.0.tmp
- /data/data/####/cache/picasso-cache/ac9301a0e62f1d0b6f2eab4256edfe11.1.tmp
- /data/data/####/cache/picasso-cache/3cc1f7d8aa859a00b9a017baacc47dd7.0.tmp
- /data/data/####/cache/picasso-cache/88c4e7b704304888e6389b20d59ea2ff.0.tmp
- /data/data/####/cache/picasso-cache/6883f9b6b2bc6ee5fce6ebdc66402eea.0.tmp
- /data/data/####/cache/picasso-cache/770e1c3d171b889987033a8f664349bb.0.tmp
- /data/data/####/cache/picasso-cache/a6823c1b25e123dd81bfe3ca66f25c17.1.tmp
- /data/data/####/cache/picasso-cache/8e1bca5315c14376276bf9a87d6eb271.0.tmp
- /data/data/####/cache/picasso-cache/21cc4eb173d8352c19dc5e244431dbe0.0.tmp
- /data/data/####/cache/picasso-cache/journal.tmp
- /data/data/####/cache/picasso-cache/0d3bac1780404dbc31e44ad8de7493cb.1.tmp
- /data/data/####/shared_prefs/wb.xml
- /data/data/####/shared_prefs/ui.xml.bak
- /data/data/####/cache/picasso-cache/0bf7c91c216ef4ec1100720447642743.1.tmp
- /data/data/####/cache/picasso-cache/21cc4eb173d8352c19dc5e244431dbe0.1.tmp
- /data/data/####/cache/picasso-cache/e6a59ed3a37d7116a0e7f12e71ca3ef4.0.tmp
- /data/data/####/cache/picasso-cache/9c1323b25ba418a5e320cd810ddc4f49.0.tmp
- /data/data/####/cache/picasso-cache/d0e1c04e9113ca2b9f588cdc808b7418.1.tmp
- /data/data/####/cache/picasso-cache/c69278038827ab2249fbb51d4ed987aa.1.tmp
- /data/data/####/cache/picasso-cache/8e1bca5315c14376276bf9a87d6eb271.1.tmp
- /data/data/####/cache/picasso-cache/6eb1b9efc2f06c857edaf9fd285ef2b9.1.tmp
- /data/data/####/cache/picasso-cache/e169cccb4d32348f8a2305e95c8a6518.1.tmp
- /data/data/####/cache/picasso-cache/de1896b25a6457a7e52b317fb121fc3e.0.tmp
Miscellaneous:
Contains functionality to send SMS messages automatically.
