Technical information
Malicious functions:
Removes its shortcut from the home screen.
Network activity:
Connecting to:
- UDP(DNS) <Google DNS>
DNS requests:
- www.kiw####.com
Modified file system:
Creates the following files:
- <Package Folder>/.classes.dex
- <Package Folder>/.kdpdata.so
Miscellaneous:
Executes next shell scripts:
- su
Loads the following dynamic libraries:
- kdp
- kwscmm
Uses elevated priveleges.
Uses administrator priveleges.
Gains access to telephone information (number, imei, etc.).
Gains access to information about active device administrators.
Adds tasks to the system scheduler.
