Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.Xiny.20
- Android.Xiny.21
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- o####.####.com
- a####.####.com
HTTP POST requests:
- a####.####.com/app_logs
- o####.####.com/check_config_update
Modified file system:
Creates the following files:
- /data/data/####/app_cndx/km.jar
- /data/data/####/files/umeng_it.cache
- /sdcard/.DianJinStatisticsTid
- /data/data/####/shared_prefs/provider_center.xml
- /data/data/####/shared_prefs/mobclick_agent_online_setting_####.xml.bak
- /data/data/####/shared_prefs/com.add.u.xml.bak
- /data/data/####/shared_prefs/wallpaper.xml
- /data/data/####/app_cnasst/pc/icp.dat
- /data/data/####/files/DianJinStatistics.db-journal
- /data/data/####/shared_prefs/dian.jin.statistics.pref.xml
- /data/data/####/shared_prefs/umeng_general_config.xml
- /data/data/####/databases/webview.db-journal
- /data/data/####/shared_prefs/com.add.u.xml
- /data/data/####/shared_prefs/mobclick_agent_online_setting_####.xml
- /sdcard/.dianjin/####/properties/c6a01432c8138d46ba39957a8250e027.properties
- /data/data/####/files/.imprint
- /data/data/####/shared_prefs/com_nd_dianjin_sdk_config.xml
- /data/data/####/app_cndx/kp.zip
- /data/data/####/files/DianJinStatistics.db
- /data/data/####/app_cndx/kp.jar
Miscellaneous:
Contains functionality to send SMS messages automatically.
