Technical information
Malicious functions:
Sends SMS:
- 70630764: 12480CB529C9758E7FAF8C05141906C78F4A578DAAFB527D0D2D49B1D07257E2
- 70630764: 12480CB529C9758E7FAF8C05141906C79F54F69DFEADD1DFBC2CB20D519B56CB
Intercepts incoming SMS and terminates the process of their transmission to handlers of other apps.
Threat detection based on machine learning.
File system changes:
Creates the following files:
- /data/data/####/aub.telus.newsms_preferences.xml
Miscellaneous:
Uses the following algorithms to encrypt data:
- AES
Contains functionality for automatic SMS sending.
Gets information about phone status (number, IMEI, etc.).
Gets information about running apps.
Displays its own windows over windows of other apps.
Parses information from SMS.
Gets information about sent/received SMS.
