Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.RemoteCode.88.origin
Modified file system:
Creates the following files:
- <Package Folder>/databases/mc_cache.db
- <Package Folder>/databases/mc_cache.db-journal
- <Package Folder>/files/ob3.zip
- <Package Folder>/shared_prefs/cn_rs.xml
- <Package Folder>/shared_prefs/t_ini.xml
Miscellaneous:
Executes next shell scripts:
- cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
Loads the following dynamic libraries:
- uimtn
Uses the following algorithms to encrypt data:
- AES
Gains access to network information.
Gains access to telephone information (number, imei, etc.).
