Technical information
Malicious functions:
Executes code of the following detected threats:
- Android.HiddenAds.76.origin
Network activity:
Connecting to:
- pin####.####.com
- pi####.####.com
HTTP POST requests:
- pin####.####.com/request
- pi####.####.com/mstat/report/?index=####
Modified file system:
Creates the following files:
- /sdcard/Tencent/mta/.mid.txt3
- /sdcard/Tencent/mta/.mid.txt
- /data/data/####/shared_prefs/####.mid.world.ro.xml
- /data/data/####/shared_prefs/SSPPrefe.xml
- /sdcard/dexfiles/dedygen.jar
- /data/data/####/shared_prefs/jianrT_sharepreferenceFlag.xml.bak
- /data/data/####/databases/tencent_analysis.db_####-journal
- /data/data/####/databases/plug.dataBase-journal
- /data/data/####/shared_prefs/####_preferences.xml
- /sdcard/dexfiles/endygen.jar
- /sdcard/Tencent/mta/.mid.txt1000001
- /data/data/####/shared_prefs/####_preferences.xml.bak
- /data/data/####/shared_prefs/jianrT_sharepreferenceFlag.xml
- /data/data/####/databases/sklead.dataBase
- /data/data/####/databases/plug.dataBase
- /data/data/####/databases/pri_tencent_analysis.db_####-journal
- /data/data/####/shared_prefs/SSPPrefe.xml.bak
- /data/data/####/databases/sklead.dataBase-journal
Miscellaneous:
Executes next shell scripts:
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
- /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
Contains functionality to send SMS messages automatically.