Android.SmsSend.19469

Technical information

Malicious functions:

Sends SMS messages:

10658424: MM#WLAN#D9AtaXppI9zuoMcSiojZ/w==#499694739#300007741212

Network activity:

Connecting to:

d####.####.com
o####.####.com
a####.####.com

HTTP POST requests:

a####.####.com/app_logs
o####.####.com/mmwlan/applySecCertForAPPThird
o####.####.com/check_config_update
d####.####.com/mmsdk/mmsdk?func=####&appkey=####&channel=####&code=####

Modified file system:

Creates the following files:

/data/anr/traces.txt
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/mobclick_agent_online_setting_com.org.orange<System Property>flower_huanle_baoziwang.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/WimiPaySDK.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/Channel.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/files/MMSID.dat
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/game_state_file.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/mobclick_agent_state_com.org.orange<System Property>flower_huanle_baoziwang.xml.bak
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/SinglePayLimit.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/mobclick_agent_state_com.org.orange<System Property>flower_huanle_baoziwang.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/MoblieAgent_sys_config.xml.bak
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/MoblieAgent_upload_com.org.orange<System Property>flower_mmbill_tuhao.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/files/MMCert.dat
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/files/MMRANDNUM.dat
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/MoblieAgent_state_com.org.orange<System Property>flower_mmbill_tuhao.xml.bak
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/mobclick_agent_header_com.org.orange<System Property>flower_huanle_baoziwang.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/MoblieAgent_upload_com.org.orange<System Property>flower_mmbill_tuhao.xml.bak
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/MonthPayMoney.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/MoblieAgent_sys_config.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/MoblieAgent_config_com.org.orange<System Property>flower_mmbill_tuhao.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/DayPayMoney.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/MoblieAgent_state_com.org.orange<System Property>flower_mmbill_tuhao.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/shared_prefs/MMsdk.xml
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/files/act3
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/files/act2
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/files/act1
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/files/act0
/data/data/com.org.orange<System Property>flower_huanle_baoziwang/files/act4