Technical information
Malicious functions:
Sends SMS:
- 0619199111: <SMS Content>
- 0619199111: VISA6240 Баланс: 5566.84р. Подробности в мобильном приложении http://sberbank.ru/sms/h1
Removes app icon from the screen.
Network activity:
Connects to:
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) 1####.217.17.46:443
DNS requests:
- tiguerm####.com
Miscellaneous:
Contains functionality for automatic SMS sending.
Gets information about network.
Gets information about phone status (number, IMEI, etc.).
Displays its own windows over windows of other apps.
Parses information from SMS.