Technical information
Malicious functions:
Executes code of the following detected threats:
- Adware.Dowgin.14.origin
Modified file system:
Creates the following files:
- /data/data/####/6733438x.jar
- /data/data/####/6736694x.jar
- /data/data/####/6757471x.jar
- /data/data/####/6775618x.jar
- /data/data/####/6781349x.jar
- /data/data/####/6791145x.jar
- /data/data/####/cafd9.xml
Miscellaneous:
Loads the following dynamic libraries:
- main
Uses the following algorithms to encrypt data:
- DES
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
