Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.BankBot.279.origin
Intercepts incoming SMS messages and terminates the process of their transmission to handlers of other applications.
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
DNS requests:
- ffp####.ru
Modified file system:
Creates the following files:
- /data/data/####/admin.xml
- /data/data/####/com.main.xml
- /data/data/####/iDataBase.db-journal
- /data/data/####/xrnkpmbjx.jar
Miscellaneous:
Uses administrator priveleges.
Gains access to telephone information (number, imei, etc.).
Adds tasks to the system scheduler.
Parses information from SMS messages.
