Technical information
Malicious functions:
Sends SMS messages:
- 4449: glomo704 00imvo3xe2
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) cdn.out####.com:80
- TCP(HTTP/1.1) a####.out####.com:80
- TCP(TLS/1.0) ws.tapjo####.com:443
DNS requests:
- a####.out####.com
- cdn.out####.com
- ws.tapjo####.com
HTTP GET requests:
- a####.out####.com/rest/talkingFriends/v1/assets-url/Android/?appname=###...
Modified file system:
Creates the following files:
- <Package Folder>/files/generalInfo
- <SD-Card>/Android/####/TalkingGingerFree.tar.lzma
- <SD-Card>/Android/.udid
Miscellaneous:
Loads the following dynamic libraries:
- ffmpeg001
- soundtouch001
Gains access to network information.
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
