Android.SmsSend.20549

Technical information

Malicious functions:

Sends SMS messages:

12114516412: systemcGx1dG8yNTAwMjY2OTkxODc3NDM=

Network activity:

Connecting to:

l####.####.com
l####.####.com:9820
p####.####.cn
p####.####.com
p####.####.com:9000

HTTP GET requests:

p####.####.com/versionpatch?updVersion=####&crc32=####&version=####&imsi...

HTTP POST requests:

l####.####.com/chnlt/ltpay/pytstart.do
l####.####.com:9820/chnlt/ltpay/pytstart.do
p####.####.cn/index.php/API
p####.####.com:9000/sdk_pools_pay_version

Modified file system:

Creates the following files:

<Package Folder>/databases/TestinAgent.db
<Package Folder>/databases/TestinAgent.db-journal
<Package Folder>/databases/mp.db
<Package Folder>/databases/mp.db-journal
<Package Folder>/databases/webview.db-journal
<Package Folder>/files/####/1496212844145_2157
<Package Folder>/files/####/1496212844191_2157
<Package Folder>/files/####/1496212844215_2157
<Package Folder>/files/####/1496212844244_2157
<Package Folder>/files/####/1496212844314_2157
<Package Folder>/files/####/1496212844380_2157
<Package Folder>/files/cp_block_201.dat
<Package Folder>/files/libyunsvc
<Package Folder>/files/plugin.apk
<Package Folder>/files/plugin.dex
<Package Folder>/files/second_block_201.dat
<Package Folder>/shared_prefs/315432f0c34a6005ff1c18a57a27f742e|account_file.xml
<Package Folder>/shared_prefs/<Package>_preferences.xml
<Package Folder>/shared_prefs/CYCLE_PAY_PREF_NAME.xml
<Package Folder>/shared_prefs/CYCLE_UNIQUE_ID.xml
<Package Folder>/shared_prefs/DATE.xml
<Package Folder>/shared_prefs/LANG_SDK_PREF.xml
<Package Folder>/shared_prefs/TD_app_pefercen_profile.xml
<Package Folder>/shared_prefs/TDpref_game.xml
<Package Folder>/shared_prefs/TDpref_longtime.xml
<Package Folder>/shared_prefs/TDpref_longtime3.xml
<Package Folder>/shared_prefs/TDpref_longtime3.xml.bak
<Package Folder>/shared_prefs/TDpref_shorttime.xml
<Package Folder>/shared_prefs/TestinAgent.xml
<Package Folder>/shared_prefs/appstartone.xml
<Package Folder>/shared_prefs/appstarttwo.xml
<Package Folder>/shared_prefs/cpMsg.xml
<Package Folder>/shared_prefs/device_id.xml.xml
<Package Folder>/shared_prefs/shareyuanlangfirst.xml
<Package Folder>/shared_prefs/tdid.xml
<Package Folder>/shared_prefs/uuid.xml
<Package Folder>/shared_prefs/yunchao_sp.xml
<Package Folder>/shared_prefs/yunchao_sp.xml.bak
<SD-Card>/.tcookieid
<SD-Card>/Android/####/com.lyhtgh.pay.ltplugin.apk
<SD-Card>/com/####/uid.sys
<SD-Card>/lang_cyclesdk/cyclesdk.apk