Loads dropped Dex/Jar

Runs executable file dropped to the device during analysis.

Looks up external IP address via web service

Uses a legitimate IP lookup service to find the infected system's external IP.

Queries information about the current Wi-Fi connection

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

Reads information about phone network operator.