Technical information
Malicious functions:
Sends SMS:
- 900: 502
Removes app icon from the screen.
Network activity:
Connects to:
- UDP(DNS) <Google DNS>
- TCP(HTTP/1.1) volinil####.com:80
- TCP(TLS/1.0) 2####.58.211.110:443
DNS requests:
- volinil####.com
HTTP POST requests:
- volinil####.com/tzjib3qjio3ogoldjmzh/index.php?a8b4=####
Miscellaneous:
Gets information about phone status (number, IMEI, etc.).
Gets information about active device administrators.
Displays its own windows over windows of other apps.
Parses information from SMS.
Gets information about phone contacts.
