Technical information
Malicious functions:
Sends SMS messages:
- 808: YES
- 808: 09071775187 5
- 808: 09071775187 15
- 4438: SHARE 9261009168 2
- 09464616630: PHILIPPINES HACKING SOCIETY CREATOR
- 808: 09071775187 20
- 4438: SHARE 9261009168 15
- 808: 09071775187 10
- 4438: SHARE 9261009168 5
- 4438: SHARE 9261009168 10
- 09071775187: PH HACKING SOCIETY Username : [/] Password : []
- 4438: SHARE 9261009168 20
Network activity:
Connecting to:
- m####.####.com
HTTP GET requests:
- m####.####.com/randex2010
Modified file system:
Creates the following files:
- /data/data/####/databases/webviewCookiesChromium.db-journal
- /data/data/####/cache/webviewCacheChromium/data_1
- /data/data/####/cache/webviewCacheChromium/data_2
- /sdcard/Pictures/hacker/hacker.png
- /sdcard/Hacker Message1.txt
- /data/system/users/0/wallpaper
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/webviewCacheChromium/f_000001
- /sdcard/Hacker Message2.txt
- /data/data/####/cache/webviewCacheChromium/data_3
- /sdcard/Hacker Message4.txt
- /sdcard/Hacker Message3.txt
- /data/data/####/cache/webviewCacheChromium/data_0
- /sdcard/Hacker Message5.txt
- /data/data/####/cache/webviewCacheChromium/index
Sets the 'executable' attribute to the following files:
- /data/system/users/0/wallpaper
Miscellaneous:
Contains functionality to send SMS messages automatically.
