Technical information
Malicious functions:
Sends SMS messages:
- 10086: 6&
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) s####.126.com:465
DNS requests:
- s####.126.com
Modified file system:
Creates the following files:
- /data/data/####/mail.xml
Miscellaneous:
Loads the following dynamic libraries:
- hello-j
- hello-jni
Uses administrator priveleges.
Contains functionality to send SMS messages automatically.
Gains access to telephone information (number, imei, etc.).
Adds tasks to the system scheduler.
Displays its own windows over windows of other applications.
Parses information from SMS messages.
Gains access to information about sent/received SMS messages.
