Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.Locker.20.origin
Blocks access to graphical screen interface.
Modified file system:
Creates the following files:
- /data/data/####/dexprotector.so
- /data/data/####/new.apk
- /data/media/####/droidflag.syst
Miscellaneous:
Loads the following dynamic libraries:
- dexprotector
Uses administrator priveleges.
Uses special library to hide executable bytecode.
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
