Technical information
Malicious functions:
Sends SMS messages:
- 10698000036592: eb91b527-8020-4710-965a-b72270caac39-1485423475979,点击发送直接登录
Network activity:
Connecting to:
- unio####.####.com
- h####.####.com
- i####.####.com
- sd####.####.com
- wap####.####.com
- a####.####.com
- pass####.####.com
HTTP GET requests:
- wap####.####.com/static/appsapi/conf/config.txt?tpl=####&app_version=####&sdk_version=####&cdnversion=####&di=####
- i####.####.com/cimages/img/18911/18911.jpg
- i####.####.com/cimages/img/21848/21848.png
HTTP POST requests:
- sd####.####.com/useraction/call
- unio####.####.com/unionsdk/cs
- sd####.####.com/game/call
- a####.####.com/rest/2.0/channel/4035844820541280693
- pass####.####.com/v2/sapi/smsgetlogin
- h####.####.com/app.gif
- unio####.####.com/unionsdk/getErrorNotice
- unio####.####.com/unionsdk/getPictureAdvertising
- unio####.####.com/unionsdk/getPictureScreen
- unio####.####.com/unionsdk/getAdAfterExit
- a####.####.com/rest/2.0/channel/channel
Modified file system:
Creates the following files:
- /sdcard/backups/system/.confd
- /data/data/####/files/libcuid.so
- /data/data/####/shared_prefs/bdp_pref.xml.bak
- /data/data/####/shared_prefs/bids.xml.bak
- /data/data/####/shared_prefs/channelid.xml
- /data/data/####/files/bdp_error
- /sdcard/backups/.SystemConfig/.cuid2
- /data/data/####/shared_prefs/__Baidu_Stat_SDK_SendRem.xml.bak
- /data/data/####/files/SGadQBABzd5fhthEgn4Nifz5__local_stat_cache.json
- /data/data/####/shared_prefs/pst.xml
- /data/data/####/databases/dk_user.db-journal
- /sdcard/duoku/sdk/cache/logoinfo_portrait.txt
- /sdcard/duoku/sdk/cache/21848.png
- /data/data/####/files/wappass.baidu.com-passport-login.html
- /data/data/####/shared_prefs/bids.xml
- /data/data/####/shared_prefs/bdp_pref.xml
- /data/data/####/shared_prefs/sapi_system.xml
- /data/data/####/databases/dk_user.db
- /sdcard/.BD_SAPI_CACHE/wappass.baidu.com/passport/login.html
- /data/data/####/files/bdp_channel
- /data/data/####/databases/recordstoredb-journal
- /data/data/####/files/bdp_pay
- /sdcard/backups/system/.confd-journal
- /data/data/####/shared_prefs/com_dk_shared_preferences.xml
- /data/data/####/databases/pushstat_4.6.2.db-journal
- /data/data/####/shared_prefs/pst.xml.bak
- /sdcard/backups/system/.config
- /data/data/####/shared_prefs/__Baidu_Stat_SDK_SendRem.xml
- /data/data/####/shared_prefs/sapi_system.xml.bak
- /data/data/####/databases/downloads.db-journal
- /sdcard/duoku/sdk/cache/18911.jpg
- /sdcard/baidu/.cuid
- /data/data/####/files/account_deb6af019f_b864c5bcb7e8074e12dd5c3bef6305e4
- /data/data/####/shared_prefs/####.push_sync.xml
- /data/data/####/databases/pushstat_4.6.2.db
- /data/data/####/shared_prefs/bindcache.xml
- /data/data/####/databases/app.db-journal
- /sdcard/backups/.SystemConfig/.cuid
- /sdcard/duoku/sdk/cache/adinfo.txt
- /data/data/####/files/bdp_activity_config
Miscellaneous:
Contains functionality to send SMS messages automatically.
