Technical information
Malicious functions:
Removes its shortcut from the home screen.
Gains access to the ITelephony private interface.
Modified file system:
Creates the following files:
- /data/data/####/ad_vdinfo
- /data/data/####/ad_vdinfo-journal
- /data/data/####/appinfo
- /data/data/####/appinfo-journal
- /data/data/####/audio
- /data/data/####/audio-journal
- /data/data/####/calllog
- /data/data/####/calllog-journal
- /data/data/####/camera
- /data/data/####/camera-journal
- /data/data/####/cheat
- /data/data/####/cheat-journal
- /data/data/####/contact
- /data/data/####/contact-journal
- /data/data/####/dirinfo
- /data/data/####/dirinfo-journal
- /data/data/####/dirset
- /data/data/####/dirset-journal
- /data/data/####/func_set
- /data/data/####/func_set-journal
- /data/data/####/gpsinfo
- /data/data/####/gpsinfo-journal
- /data/data/####/imei.dat
- /data/data/####/smsinfo
- /data/data/####/smsinfo-journal
- /data/data/####/uploadfiles
- /data/data/####/uploadfiles-journal
- /data/data/####/uuuu
- /data/data/####/v.dat
- /data/media/####/.cuid
Miscellaneous:
Uses the following algorithms to encrypt data:
- AES-CBC-PKCS5Padding
Gains access to geolocation.
Gains access to telephone information (number, imei, etc.).
Adds tasks to the system scheduler.
Displays its own windows over windows of other applications.
