Technical information
Malicious functions:
Gains access to the ITelephony private interface.
Modified file system:
Creates the following files:
- /data/anr/traces.txt
- <Package Folder>/shared_prefs/autocamer.xml
- <Package Folder>/shared_prefs/autocamer.xml.bak
- <Package Folder>/shared_prefs/setting.xml
Miscellaneous:
Executes next shell scripts:
- getprop pt.label
- getprop ro.product.brand
- getprop ro.product.name
- sh -c echo on > /proc/uart3_3v3_en
- sh -c getprop pt.label
- sh -c getprop ro.product.brand
- sh -c getprop ro.product.name
Loads the following dynamic libraries:
- StSerialPort
Contains functionality to send SMS messages automatically.
Gains access to camera interface.
Gains access to telephone information (number, imei, etc.).
Adds tasks to the system scheduler.
Displays its own windows over windows of other applications.
