Technical information
Malicious functions:
Sends SMS:
- 18454347335: <SMS Address>-大佬><SMS Content>
- 18454347335: 安卓11高级服务已经启动，程序使用到期时间: 9999-99-99 90:99:99
- 18454347335: 开始使用 安卓11乐豪 回复com#false关闭com#true开启 手机版本: 18 <System Property>
Intercepts incoming SMS and terminates the process of their transmission to handlers of other apps.
Threat detection based on machine learning.
Network activity:
Connects to:
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) and####.cli####.go####.com:443
DNS requests:
- and####.cli####.go####.com
Miscellaneous:
Gets information about phone status (number, IMEI, etc.).
Parses information from SMS.
