Technical information
Malicious functions:
Overlays the screen with its own window and blocks GUI access.
Network activity:
Connects to:
- UDP(DNS) <Google DNS>
- TCP(TLS/1.0) www.google####.com:443
- TCP(TLS/1.2) 1####.250.74.100:443
- TCP(TLS/1.2) 1####.250.74.106:443
DNS requests:
- p####.google####.com
- pla####.google####.com
- www.google####.com
Miscellaneous:
Executes the following shell scripts:
- app_process /system/bin com.android.commands.pm.Pm list packages
- app_process /system/bin com.android.commands.pm.Pm uninstall <Package>
- app_process /system/bin com.android.commands.pm.Pm uninstall android
- app_process /system/bin com.android.commands.pm.Pm uninstall android.ext.services
- app_process /system/bin com.android.commands.pm.Pm uninstall android.ext.shared
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.backupconfirm
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.basicsmsreceiver
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.bluetooth
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.bluetoothmidiservice
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.bookmarkprovider
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.calculator2
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.calendar
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.calllogbackup
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.camera2
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.captiveportallogin
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.carrierconfig
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.cellbroadcastreceiver
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.certinstaller
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.contacts
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.cts.ctsshim
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.cts.priv.ctsshim
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.defcontainer
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.deskclock
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.development
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.dialer
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.documentsui
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.dreams.basic
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.egg
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.email
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.emergency
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.externalstorage
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.gallery3d
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.htmlviewer
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.inputdevices
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.inputmethod.latin
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.keychain
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.launcher3
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.location.fused
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.managedprovisioning
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.messaging
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.mms.service
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.mtp
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.packageinstaller
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.pacprocessor
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.phone
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.printservice.recommendation
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.printspooler
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.providers.blockednumber
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.providers.calendar
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.providers.contacts
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.providers.downloads
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.providers.downloads.ui
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.providers.media
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.providers.settings
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.providers.telephony
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.providers.userdictionary
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.provision
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.proxyhandler
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.quicksearchbox
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.server.telecom
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.settings
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.sharedstoragebackup
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.shell
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.statementservice
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.storagemanager
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.systemui
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.vending
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.vpndialogs
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.wallpaperbackup
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.wallpapercropper
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.wallpaperpicker
- app_process /system/bin com.android.commands.pm.Pm uninstall com.android.webview
- app_process /system/bin com.android.commands.pm.Pm uninstall com.cyanogenmod.eleven
- app_process /system/bin com.android.commands.pm.Pm uninstall com.drweb.habilis
- app_process /system/bin com.android.commands.pm.Pm uninstall com.example.android.notepad
- app_process /system/bin com.android.commands.pm.Pm uninstall com.example.android.rssreader
- app_process /system/bin com.android.commands.pm.Pm uninstall com.google.android.backuptransport
- app_process /system/bin com.android.commands.pm.Pm uninstall com.google.android.feedback
- app_process /system/bin com.android.commands.pm.Pm uninstall com.google.android.gms
- app_process /system/bin com.android.commands.pm.Pm uninstall com.google.android.gsf
- app_process /system/bin com.android.commands.pm.Pm uninstall com.google.android.gsf.login
- app_process /system/bin com.android.commands.pm.Pm uninstall com.google.android.onetimeinitializer
- app_process /system/bin com.android.commands.pm.Pm uninstall com.google.android.partnersetup
- app_process /system/bin com.android.commands.pm.Pm uninstall com.google.android.play.games
- app_process /system/bin com.android.commands.pm.Pm uninstall com.google.android.syncadapters.calendar
- app_process /system/bin com.android.commands.pm.Pm uninstall com.google.android.syncadapters.contacts
- app_process /system/bin com.android.commands.pm.Pm uninstall com.svox.pico
- app_process /system/bin com.android.commands.pm.Pm uninstall jackpal.androidterm
- app_process /system/bin com.android.commands.pm.Pm uninstall org.chromium.webview_shell
- logcat
- logcat -c
- pkill -f .*
- pm list packages
- pm uninstall <Package>
- pm uninstall android
- pm uninstall android.ext.services
- pm uninstall android.ext.shared
- pm uninstall com.android.backupconfirm
- pm uninstall com.android.basicsmsreceiver
- pm uninstall com.android.bluetooth
- pm uninstall com.android.bluetoothmidiservice
- pm uninstall com.android.bookmarkprovider
- pm uninstall com.android.calculator2
- pm uninstall com.android.calendar
- pm uninstall com.android.calllogbackup
- pm uninstall com.android.camera2
- pm uninstall com.android.captiveportallogin
- pm uninstall com.android.carrierconfig
- pm uninstall com.android.cellbroadcastreceiver
- pm uninstall com.android.certinstaller
- pm uninstall com.android.contacts
- pm uninstall com.android.cts.ctsshim
- pm uninstall com.android.cts.priv.ctsshim
- pm uninstall com.android.defcontainer
- pm uninstall com.android.deskclock
- pm uninstall com.android.development
- pm uninstall com.android.dialer
- pm uninstall com.android.documentsui
- pm uninstall com.android.dreams.basic
- pm uninstall com.android.egg
- pm uninstall com.android.email
- pm uninstall com.android.emergency
- pm uninstall com.android.externalstorage
- pm uninstall com.android.gallery3d
- pm uninstall com.android.htmlviewer
- pm uninstall com.android.inputdevices
- pm uninstall com.android.inputmethod.latin
- pm uninstall com.android.keychain
- pm uninstall com.android.launcher3
- pm uninstall com.android.location.fused
- pm uninstall com.android.managedprovisioning
- pm uninstall com.android.messaging
- pm uninstall com.android.mms.service
- pm uninstall com.android.mtp
- pm uninstall com.android.packageinstaller
- pm uninstall com.android.pacprocessor
- pm uninstall com.android.phone
- pm uninstall com.android.printservice.recommendation
- pm uninstall com.android.printspooler
- pm uninstall com.android.providers.blockednumber
- pm uninstall com.android.providers.calendar
- pm uninstall com.android.providers.contacts
- pm uninstall com.android.providers.downloads
- pm uninstall com.android.providers.downloads.ui
- pm uninstall com.android.providers.media
- pm uninstall com.android.providers.settings
- pm uninstall com.android.providers.telephony
- pm uninstall com.android.providers.userdictionary
- pm uninstall com.android.provision
- pm uninstall com.android.proxyhandler
- pm uninstall com.android.quicksearchbox
- pm uninstall com.android.server.telecom
- pm uninstall com.android.settings
- pm uninstall com.android.sharedstoragebackup
- pm uninstall com.android.shell
- pm uninstall com.android.statementservice
- pm uninstall com.android.storagemanager
- pm uninstall com.android.systemui
- pm uninstall com.android.vending
- pm uninstall com.android.vpndialogs
- pm uninstall com.android.wallpaperbackup
- pm uninstall com.android.wallpapercropper
- pm uninstall com.android.wallpaperpicker
- pm uninstall com.android.webview
- pm uninstall com.cyanogenmod.eleven
- pm uninstall com.drweb.habilis
- pm uninstall com.example.android.notepad
- pm uninstall com.example.android.rssreader
- pm uninstall com.google.android.backuptransport
- pm uninstall com.google.android.feedback
- pm uninstall com.google.android.gms
- pm uninstall com.google.android.gsf
- pm uninstall com.google.android.gsf.login
- pm uninstall com.google.android.onetimeinitializer
- pm uninstall com.google.android.partnersetup
- pm uninstall com.google.android.play.games
- pm uninstall com.google.android.syncadapters.calendar
- pm uninstall com.google.android.syncadapters.contacts
- pm uninstall com.svox.pico
- pm uninstall jackpal.androidterm
- pm uninstall org.chromium.webview_shell
- sh /system/bin/pm uninstall com.android.keychain
- sh /system/bin/pm uninstall com.example.android.notepad
Requests the system alert window permission.
