Technical information
Malicious functions:
Sends SMS:
- 7478389704: <SMS Content>
- 7478389704: from <Phone Number>: <SMS Content>
- 7478389704: from <SMS Address>:
Threat detection based on machine learning.
Network activity:
Connects to:
- UDP(DNS) 8####.8.4.4:53
- UDP(NTP) 2.and####.p####.####.org:123
- TCP(TLS/1.0) gmscomp####.google####.com:443
- TCP(TLS/1.2) 1####.250.27.94:443
- TCP(TLS/1.2) gmscomp####.google####.com:443
- TCP(TLS/1.2) 1####.250.27.138:443
- UDP gmscomp####.google####.com:443
DNS requests:
- 2.and####.p####.####.org
- gmscomp####.google####.com
Miscellaneous:
Contains functionality for automatic SMS sending.
Displays its own windows over windows of other apps.
