Technical information
Malicious functions:
Executes code of the following detected threats:
- Adware.Plague.1.origin
Gains access to the ITelephony private interface.
Modified file system:
Creates the following files:
- /data/data/####/app_oxyxrclasses.jar
- /data/data/####/dbpyeo-journal
- /data/data/####/vwwmy
- /data/data/####/webview.db-journal
Miscellaneous:
Loads the following dynamic libraries:
- dice_jb2
- dice_loadlibrary
- ffmpeg_dice
- oomb
- sonic
Uses the following algorithms to encrypt data:
- DES-ECB-PKCS5Padding
Gains access to telephone information (number, imei, etc.).
Gains access to information about running applications.
Displays its own windows over windows of other applications.
