Technical information
Malicious functions:
Removes its shortcut from the home screen.
Intercepts incoming SMS messages and terminates the process of their transmission to handlers of other applications.
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(SMTP) s####.163.com:25
DNS requests:
- s####.163.com
Modified file system:
Creates the following files:
- <Package Folder>/databases/OverLook
- <Package Folder>/databases/OverLook-journal
Miscellaneous:
Uses administrator priveleges.
Gains access to telephone information (number, imei, etc.).
Gains access to information about active device administrators.
Parses information from SMS messages.
