Technical information
Malicious functions:
Removes app icon from the screen.
Threat detection based on machine learning.
Network activity:
Connects to:
- UDP(DNS) <Google DNS>
DNS requests:
- api.tele####.org
Miscellaneous:
Executes the following shell scripts:
- logcat
- logcat -c
Displays its own windows over windows of other apps.
Gets information about sent/received SMS.
Attempts to detect sandbox environment.
