Technical information
Malicious functions:
Sends SMS messages:
- 12114: HZSY#####
Sends data on received text messages to remote host.
Network activity:
Connecting to:
- sdku####.####.com
- mo####.####.com
- v####.####.cn
- 1####.####.com
- mmy####.####.com
- i####.####.cn
- vide####.####.cn
- priceru####.####.com
HTTP GET requests:
- 1####.####.com/ic.asp
- mmy####.####.com/mmys-cps/styleTopChlVideo.service?pageNo=####&pageSize=####&showStyle=####&rv=####&deviceId=####&uuid=####&imei=####&imsi=####&manufa...
- vide####.####.cn/20170324/dd03a907-d010-4593-b171-b096a300c583-4.jpg
- vide####.####.cn/tou2159.jpg
- vide####.####.cn/20170328/336dd91d-1570-40fc-ace4-600c066d1e15-2.jpg
- vide####.####.cn/20170330/cc0d1087-75ef-451d-ae75-9831b3faa110-1.jpg
- mmy####.####.com/mmys-cps/rdContent.service?deviceId=####&uuid=####&imei=####&imsi=####&manufacturer=####&model=####&versionCode=####&ditchNo=####&app...
- i####.####.cn/iplookup/iplookup.php?format=####
- v####.####.cn/20170322/500c87a5-372a-4a1a-9bf0-3db4c7b0cdb3-GNE164.mp4
- vide####.####.cn/20170317/bf739e2a-c8dc-42ca-b101-b019fd57f9fe-%E4%B8%80%E8%BC%AA%E8%BB%8A%E3%80%81%E5%A9%A6%E8%AD%A6%E3%81%95%E3%82%93.jpg
- vide####.####.cn/tou2131.jpg
- vide####.####.cn/20170330/ab0d814e-01d0-44f0-ab72-fb432defc8a9-2.jpg
- vide####.####.cn/20170317/9f638fff-74b3-41f7-8230-b9b4ef514e6c-%E5%B1%88%E8%BE%B1%E3%81%AE%E5%A4%B1%E7%A6%81.jpg
- mmy####.####.com/mmys-cps/vdtRmdVideoList.service?showStyle=####&id=####&itemCount=####&rv=####&deviceId=####&uuid=####&imei=####&imsi=####&manufactur...
- vide####.####.cn/20170329/dc76930e-db0e-41d3-be64-167c278715dd-154027-0.PNG
- vide####.####.cn/TOUXIANGS93.png
- vide####.####.cn/TOUXIANGS90.png
- vide####.####.cn/20170324/6de0ecf8-a5ca-4521-a21a-5d0a94fb19e1-1.jpg
- vide####.####.cn/20170317/62911c63-a7b8-4c15-bbae-908df8f834a6-%E7%8C%A5%E8%A4%BB%E3%81%AA%E6%80%A7%E6%AC%B21.jpg
- mmy####.####.com/mmys-cps/videoDtl.service?id=####&rv=####&deviceId=####&uuid=####&imei=####&imsi=####&manufacturer=####&model=####&versionCode=####&d...
- vide####.####.cn/20170324/ae5a831c-e53e-44e4-b97f-1ed5238f1a63-12.jpg
- vide####.####.cn/tou2078.jpg
- mmy####.####.com/mmys-cps/barrage3.service?videoId=####&deviceId=####&uuid=####&imei=####&imsi=####&manufacturer=####&model=####&versionCode=####&ditc...
- mmy####.####.com/mmys-cps/runConfig.service?deviceId=####&imei=####&imsi=####&manufacturer=####&model=####&versionCode=####&ditchNo=####&appId=####&dc...
- vide####.####.cn/20170324/9c16759d-b074-43e2-8da2-dec5b87f1985-%E5%90%8C%E5%9F%8E%E4%B8%A4%E6%80%A7%E4%BA%A4%E5%8F%8B.jpg
- vide####.####.cn/TOUXIANGS86.png
- mmy####.####.com/mmys-cps/bannerInfo.service?showStyle=####&deviceId=####&uuid=####&imei=####&imsi=####&manufacturer=####&model=####&versionCode=####&...
- priceru####.####.com/price-rule-cmp/rule/matchRule?version=####&deviceId=####&uuid=####&imei=####&imsi=####&manufacturer=####&model=####&versionCode=#...
- vide####.####.cn/tou2142.jpg
- vide####.####.cn/20170330/79d3429e-0570-4080-be32-a4706f81daef-%E6%AF%8D%E3%81%AE%E5%8F%8B%E4%BA%BA.jpg
- vide####.####.cn/TOUXIANGS52.png
- vide####.####.cn/tou2010.jpg
- vide####.####.cn/20170318/bc18eea1-de23-43ab-a656-8da400b3af8e-oba00312jp-9.jpg
- vide####.####.cn/20170224/a72e2107-e445-4d05-95a5-99cc9e5cdd0a-133.jpg
- vide####.####.cn/TOUXIANGS186.png
- vide####.####.cn/20170322/4659e116-12be-4bbc-a41a-458bf573a25e-GNE164.PNG
- mmy####.####.com/mmys-cps/videoComment2.service?videoId=####&deviceId=####&uuid=####&imei=####&imsi=####&manufacturer=####&model=####&versionCode=####...
HTTP POST requests:
- mmy####.####.com/mmys-cps/lookVideoStat.service?videoId=####&isRmd=####&deviceId=####&uuid=####&imei=####&imsi=####&manufacturer=####&model=####&versi...
- mmy####.####.com/mmys-cps/userVisit.service?deviceId=####&uuid=####&imei=####&imsi=####&manufacturer=####&model=####&versionCode=####&ditchNo=####&app...
- mmy####.####.com/dynamicpay//getSyFormalChannels.json?
- mmy####.####.com/mmys-cps/userActivation.service?deviceId=####&uuid=####&imei=####&imsi=####&manufacturer=####&model=####&versionCode=####&ditchNo=###...
- mo####.####.com/mobile-service/getImsiMobilePhone.json
- sdku####.####.com/sdk-update/sdkUpdateCdnUpload.json
Modified file system:
Creates the following files:
- /data/data/####/cache/picasso-cache/383df07cbfb188070c16b5c33c8b5335.0.tmp
- /data/data/####/cache/picasso-cache/7e7be6b207d6beddc3fa0071f5b362c7.1.tmp
- /data/data/####/cache/picasso-cache/c8f6800f50b1513f4b2385de2b451af0.1.tmp
- /data/data/####/cache/picasso-cache/2bf1406f94836cd19ffdee4c1b30c3e8.0.tmp
- /data/data/####/cache/picasso-cache/50b8a31945033cc4d1a50aa1fe5aaba3.1.tmp
- /data/data/####/cache/picasso-cache/248946480dcf3f89d45628d178f3b063.0.tmp
- /data/data/####/cache/picasso-cache/7e0dd8bd972bb21eb912bdb5b2b36cd0.1
- /data/data/####/cache/picasso-cache/242c9c16ac9092a35da1965b066219e2.0.tmp
- /data/data/####/databases/webview.db-journal
- /data/data/####/cache/picasso-cache/383df07cbfb188070c16b5c33c8b5335.1.tmp
- /data/data/####/cache/picasso-cache/c24822fc7e784973d7511a158beb6b75.1.tmp
- /data/data/####/cache/picasso-cache/2bf1406f94836cd19ffdee4c1b30c3e8.1.tmp
- /data/data/####/cache/picasso-cache/a6213fd5faccb13b505167ad47ba38c4.0.tmp
- /data/data/####/shared_prefs/time.xml
- /data/data/####/cache/picasso-cache/aca48d1db211e070befd09d917282e1e.0.tmp
- /data/data/####/shared_prefs/ds_configer.xml
- /data/data/####/cache/picasso-cache/b1724e7d763f3549d93cf8c43d4ec99f.0.tmp
- /data/data/####/cache/picasso-cache/c24822fc7e784973d7511a158beb6b75.0.tmp
- /data/data/####/databases/sy_video_data_cache-journal
- /data/data/####/cache/picasso-cache/448bab2f7e2e2e203026cf038ac6357e.0.tmp
- /data/data/####/cache/picasso-cache/885da13da7af7a1da90668f4ba59caaf.1.tmp
- /data/data/####/cache/picasso-cache/1cae0f1fef5c89dafde58852694b8055.1.tmp
- /data/data/####/cache/picasso-cache/afc8dfea0c9b36158cecca800c17bcbb.0.tmp
- /data/data/####/cache/picasso-cache/6134d992660c09eb1c9586ad7a410737.1.tmp
- /data/data/####/cache/picasso-cache/279660a8a570b82d965ba3d19706e95a.1.tmp
- /data/data/####/cache/picasso-cache/740f058d38c580d4d73e15a5c3ddfb49.0.tmp
- /data/data/####/cache/picasso-cache/007e356f49fadf1fa5efef5f0c1c24fd.0.tmp
- /data/data/####/cache/picasso-cache/afc8dfea0c9b36158cecca800c17bcbb.1.tmp
- /data/data/####/shared_prefs/uuid.xml
- /data/data/####/cache/picasso-cache/248946480dcf3f89d45628d178f3b063.1.tmp
- /data/data/####/cache/picasso-cache/c7a8138d8077d25d8609cd47762fb512.0.tmp
- /data/data/####/cache/picasso-cache/4231f010d67872f1e8536c4e90d2186d.1.tmp
- /data/data/####/cache/picasso-cache/1cae0f1fef5c89dafde58852694b8055.0.tmp
- /data/data/####/cache/picasso-cache/222216c7acd4685869bc5549dd55a44b.1.tmp
- /data/data/####/cache/picasso-cache/242c9c16ac9092a35da1965b066219e2.1.tmp
- /data/data/####/cache/picasso-cache/a6213fd5faccb13b505167ad47ba38c4.1.tmp
- /data/data/####/cache/picasso-cache/740f058d38c580d4d73e15a5c3ddfb49.1.tmp
- /data/data/####/cache/picasso-cache/c8f6800f50b1513f4b2385de2b451af0.0.tmp
- /data/data/####/cache/picasso-cache/03fcd9a7d287c7e79539e98b28334a33.0.tmp
- /data/data/####/databases/upgrade_app-journal
- /data/data/####/cache/picasso-cache/6134d992660c09eb1c9586ad7a410737.0.tmp
- /data/data/####/cache/picasso-cache/b1724e7d763f3549d93cf8c43d4ec99f.1.tmp
- /data/data/####/cache/picasso-cache/279660a8a570b82d965ba3d19706e95a.0.tmp
- /data/data/####/databases/statistics_db-journal
- /data/data/####/cache/picasso-cache/007e356f49fadf1fa5efef5f0c1c24fd.1.tmp
- /sdcard/SYPAYFILENAME/CACHE/SMSCACHE/ISDELSMS
- /data/data/####/cache/picasso-cache/50b8a31945033cc4d1a50aa1fe5aaba3.0.tmp
- /data/data/####/shared_prefs/free_click_count.xml
- /data/data/####/shared_prefs/p_config.xml
- /data/data/####/cache/picasso-cache/7e7be6b207d6beddc3fa0071f5b362c7.0.tmp
- /data/data/####/cache/picasso-cache/222216c7acd4685869bc5549dd55a44b.0.tmp
- /data/data/####/cache/picasso-cache/448bab2f7e2e2e203026cf038ac6357e.1.tmp
- /data/data/####/cache/picasso-cache/70c77d3d1c75aa75f4f296ffeb4fd3c4.0.tmp
- /data/data/####/files/gaClientId
- /data/data/####/databases/recommend_app-journal
- /data/data/####/cache/picasso-cache/journal.tmp
- /data/data/####/cache/picasso-cache/c7a8138d8077d25d8609cd47762fb512.1.tmp
- /data/data/####/databases/sy_pay_record-journal
- /data/data/####/databases/google_analytics_v2.db-journal
- /data/data/####/cache/picasso-cache/885da13da7af7a1da90668f4ba59caaf.0.tmp
- /data/data/####/cache/picasso-cache/70c77d3d1c75aa75f4f296ffeb4fd3c4.1.tmp
- /data/data/####/databases/statistics_db
- /data/data/####/cache/picasso-cache/03fcd9a7d287c7e79539e98b28334a33.1.tmp
- /data/data/####/cache/picasso-cache/4231f010d67872f1e8536c4e90d2186d.0.tmp
- /data/data/####/cache/picasso-cache/7e0dd8bd972bb21eb912bdb5b2b36cd0.0.tmp
- /data/data/####/cache/picasso-cache/aca48d1db211e070befd09d917282e1e.1.tmp
Miscellaneous:
Contains functionality to send SMS messages automatically.
