Technical information
Malicious functions:
Sends SMS:
- 13790934495: 0.0,0.0
- 13790934495: 我出事了,请救我,随后你将收到我的定位信息(经纬度),可通过经纬度查到我的位置——苏木棉手机自动发出
- 15812347206: 0.0,0.0
- 15812347206: 我出事了,请救我,随后你将收到我的定位信息(经纬度),可通过经纬度查到我的位置——苏木棉手机自动发出
Accesses the ITelephony private interface.
Network activity:
Connects to:
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) ssl.gst####.com:443
- TCP(TLS/1.0) www.go####.com:443
- TCP(TLS/1.0) www.gst####.com:443
DNS requests:
- mt####.go####.com
- ssl.gst####.com
- www.go####.com
- www.gst####.com
Miscellaneous:
Makes phone calls to the following numbers:
- 667206
Gets information about location.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.
Parses information from SMS.
Gets information about sent/received SMS.