Technical information
Malicious functions:
Removes its shortcut from the home screen.
Modified file system:
Creates the following files:
- /system/bin/torpedo
- <Package Folder>/databases/kuikuidb
- <Package Folder>/databases/kuikuidb-journal
- <Package Folder>/files/torpedo
Miscellaneous:
Executes next shell scripts:
- chmod 4711 /system/bin/torpedo
- chown root /system/bin/torpedo
- mount -o ro,remount /system
- mount -o rw,remount /system
- sh
- sh -c su -c torpedo m
- sh -c su -c torpedo q
- sh -c torpedo q
- su
- su -c torpedo m
- su -c torpedo q
Loads the following dynamic libraries:
- mywill
- sqlcipher
Uses elevated priveleges.
Gains access to telephone information (number, imei, etc.).
Displays its own windows over windows of other applications.
