Technical information
Malicious functions:
Removes app icon from the screen.
File system changes:
Creates the following files:
- /data/anr/traces.txt
- /data/media/####/androidlib
Miscellaneous:
Executes the following shell scripts:
- sh
- su
Uses elevated priveleges.
Uses special library to hide executable bytecode.
Gets information about phone status (number, IMEI, etc.).
Gets information about sent/received SMS.
