Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.MobiDash.1.origin
Network activity:
Connecting to:
- a####.####.net
HTTP POST requests:
- a####.####.net/categorization/catalogs
Modified file system:
Creates the following files:
- /data/data/####/files/icons/com.android.gallery3dcom.android.gallery3d.app.Gallery
- /data/data/####/files/ClockFontHours
- /data/data/####/shared_prefs/####_preferences.xml
- /data/data/####/files/icons/com.google.android.gmscom.google.android.gms.common.settings.GoogleSettingsActivity
- /data/data/####/files/icons/com.android.mmscom.android.mms.ui.ConversationList
- /data/data/####/code_cache/secondary-dexes/####-1.apk.classes1191029462.zip
- /data/data/####/files/icons/com.android.emailcom.android.email.activity.Welcome
- /data/data/####/files/icons/com.example.android.notepadcom.example.android.notepad.NotesList
- /data/data/####/files/icons/com.android.musiccom.android.music.MusicBrowserActivity
- /data/data/####/app_app_apk/flowerpro.dat.jar
- /data/data/####/files/icons/com.android.calculator2com.android.calculator2.Calculator
- /data/data/####/files/icons/com.android.quicksearchboxcom.android.quicksearchbox.SearchActivity
- /data/data/####/files/asdfg
- /data/data/####/databases/AppList
- /data/data/####/files/icons/com.android.inputmethod.latincom.android.inputmethod.latin.setup.SetupActivity
- /data/data/####/files/icons/com.android.vendingcom.android.vending.AssetBrowserActivity
- /data/data/####/files/icons/com.android.contactscom.android.contacts.activities.PeopleActivity
- /data/data/####/databases/FlowerBubble-journal
- /data/data/####/shared_prefs/multidex.version.xml
- /data/data/####/files/icons/com.android.dialercom.android.dialer.DialtactsActivity
- /data/data/####/files/icons/com.android.providers.downloads.uicom.android.providers.downloads.ui.DownloadList
- /data/data/####/databases/AppList-journal
- /data/data/####/files/icons/com.android.deskclockcom.android.deskclock.DeskClock
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /data/data/####/shared_prefs/####.xml
- /data/data/####/files/icons/com.android.gallery3dcom.android.camera.CameraLauncher
- /data/data/####/files/icons/com.android.calendarcom.android.calendar.AllInOneActivity
- /data/data/####/files/icons/com.android.developmentcom.android.development.Development
- /data/data/####/files/ClockFontMinutes
- /data/data/####/files/ClockFontData
- /data/data/####/files/icons/com.android.settingscom.android.settings.Settings
- /data/system/users/0/wallpaper
- /data/data/####/files/icons/com.android.browsercom.android.browser.BrowserActivity
Sets the 'executable' attribute to the following files:
- /data/system/users/0/wallpaper
Miscellaneous:
Executes next shell scripts:
- /system/bin/dexopt --dex 27 40 40 266304 /data/data/####/app_app_apk/flowerpro.dat.jar 1244899625 818008976 45 /system/framework/core.jar /system/framework/core-junit.jar /system/framework/bouncycastle.jar /system/framework/ext.jar /system/f
- /system/bin/dexopt --dex 27 41 40 502916 /data/data/####/code_cache/secondary-dexes/####-1.apk.classes2.zip 2168832 705359446 45 /system/framework/core.jar /system/framework/core-junit.jar /system/framework/bouncycastle.jar /sy
Contains functionality to send SMS messages automatically.
