Technical information
Malicious functions:
Executes code of the following detected threats:
- Adware.Dowgin.14.origin
File system changes:
Creates the following files:
- /data/data/####/0644668z.jar
- /data/data/####/0647107z.jar
- /data/data/####/0650536z.jar
- /data/data/####/0653513z.jar
- /data/data/####/0654851z.jar
- /data/data/####/0656501z.jar
- /data/data/####/0659959z.jar
- /data/data/####/0663923z.jar
- /data/data/####/0667168z.jar
- /data/data/####/0669697z.jar
- /data/data/####/0670855z.jar
- /data/data/####/0673784z.jar
- /data/data/####/0676607z.jar
- /data/data/####/0679062z.jar
- /data/data/####/0684986z.jar
- /data/data/####/0688726z.jar
- /data/data/####/0692547z.jar
- /data/data/####/0697382z.jar
- /data/data/####/0700272z.jar
- /data/data/####/0702817z.jar
- /data/data/####/313d7.xml
Miscellaneous:
Loads the following dynamic libraries:
- game
Uses the following algorithms to encrypt data:
- DES
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.
