Technical information
Malicious functions:
Overlays the screen with its own window and blocks GUI access.
Network activity:
Connects to:
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) www.google####.com:443
DNS requests:
- www.google####.com
File system changes:
Creates the following files:
- /data/anr/traces.txt
- /data/misc/####/primary.prof
Miscellaneous:
Executes the following shell scripts:
- logcat
- logcat -c
Uses administrator priveleges.
Gets information about active device administrators.
Displays its own windows over windows of other apps.
Requests the system alert window permission.
