Technical information
Malicious functions:
Prompts to install third-party apps.
Threat detection based on machine learning.
File system changes:
Creates the following files:
- /data/app/####/update_package
- /data/data/####/profileInstalled
- /data/data/####/profileinstaller_profileWrittenFor_lastUpdateTime.dat
- /data/data/####/ps_install_prefs.xml
- /data/misc/####/primary.prof
Miscellaneous:
Loads the following dynamic libraries:
- libzrelbmumnwe
Displays its own windows over windows of other apps.
Appears corrupted in a way typical for malicious files.
