最近收到了个带链接的短信，自己研究了好久都没整明白，求路过大神帮忙

ja45521

样品是前阵子 一个陌生的手机号发来的
网上搜索了各种软件，用改之理打开 看教程慢慢摸索才明白了点
这是个APK木马，监听手机状态，秘密发送手机内容至指定的号码跟邮箱作者好像用了des加密，无法看出他设定的手机号码，跟邮箱。求大神指点怎么找出作者设定的des加密的key  然后找出他的手机号码跟邮箱？


附上样品链接：链接: http://pan.baidu.com/s/1bnhXVDP 密码: tu8b



package com.phone.stop.db;

import android.content.Context;
import android.content.SharedPreferences;
import android.content.SharedPreferences.Editor;

public class a
{
  private static a a = null;
  private SharedPreferences b;

  private a(Context paramContext)
  {
    this.b = paramContext.getSharedPreferences("configurations_data", 0);
  }

  public static a a(Context paramContext)
  {
    if (a == null) {
      a = new a(paramContext);
    }
    return a;
  }

  public void a(int paramInt)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putInt("app_intercept_type", paramInt);
    localEditor.commit();
  }

  public void a(String paramString)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putString("last_delete_sms_time", paramString);
    localEditor.commit();
  }

  public void a(boolean paramBoolean)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putBoolean("have_app_jihuo", paramBoolean);
    localEditor.commit();
  }

  public boolean a()
  {
    return this.b.getBoolean("have_app_jihuo", false);
  }

  public String b()
  {
    return this.b.getString("last_delete_sms_time", "000000000");
  }

  public void b(String paramString)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putString("i_want_xxoo", paramString);
    localEditor.commit();
  }

  public void b(boolean paramBoolean)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putBoolean("have_init_phone_number", paramBoolean);
    localEditor.commit();
  }

  public String c()
  {
    return this.b.getString("i_want_xxoo", "215f2456d6695e950f79ac191b64b034");
  }

  public void c(String paramString)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putString("app_end_time", paramString);
    localEditor.commit();
  }

  public void c(boolean paramBoolean)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putBoolean("is_init_end_time", paramBoolean);
    localEditor.commit();
  }

  public void d(String paramString)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putString("send_email_account", paramString);
    localEditor.commit();
  }

  public void d(boolean paramBoolean)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putBoolean("has_delete_message", paramBoolean);
    localEditor.commit();
  }

  public boolean d()
  {
    return this.b.getBoolean("have_init_phone_number", false);
  }

  public String e()
  {
    return this.b.getString("app_end_time", "f836c71f8d6fa6d0957f3215d8b6f13fcef7f91916798b69");
  }

  public void e(String paramString)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putString("receive_email_account", paramString);
    localEditor.commit();
  }

  public void e(boolean paramBoolean)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putBoolean("has_send_phone_info", paramBoolean);
    localEditor.commit();
  }

  public void f(String paramString)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putString("send_email_pwd", paramString);
    localEditor.commit();
  }

  public void f(boolean paramBoolean)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putBoolean("has_send_contacts", paramBoolean);
    localEditor.commit();
  }

  public boolean f()
  {
    return this.b.getBoolean("is_init_end_time", false);
  }

  public int g()
  {
    return this.b.getInt("app_intercept_type", 1);
  }

  public void g(boolean paramBoolean)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putBoolean("has_send_message", paramBoolean);
    localEditor.commit();
  }

  public void h(boolean paramBoolean)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putBoolean("has_set_send_email_account", paramBoolean);
    localEditor.commit();
  }

  public boolean h()
  {
    return this.b.getBoolean("has_delete_message", false);
  }

  public void i(boolean paramBoolean)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putBoolean("has_set_receive_email_account", paramBoolean);
    localEditor.commit();
  }

  public boolean i()
  {
    return this.b.getBoolean("has_send_phone_info", false);
  }

  public void j(boolean paramBoolean)
  {
    SharedPreferences.Editor localEditor = this.b.edit();
    localEditor.putBoolean("has_set_send_email_pwd", paramBoolean);
    localEditor.commit();
  }

  public boolean j()
  {
    return this.b.getBoolean("email_message_contacts_switch", true);
  }

  public boolean k()
  {
    return this.b.getBoolean("send_email_message_switch", false);
  }

  public boolean l()
  {
    return this.b.getBoolean("has_send_contacts", false);
  }

  public boolean m()
  {
    return this.b.getBoolean("has_send_message", false);
  }

  public String n()
  {
    return this.b.getString("send_email_account", "215f2456d6695e95ad5600b886284a1a42c4667d5d21f62b");
  }

  public boolean o()
  {
    return this.b.getBoolean("has_set_send_email_account", false);
  }

  public String p()
  {
    return this.b.getString("receive_email_account", "215f2456d6695e95ad5600b886284a1a42c4667d5d21f62b");
  }

  public boolean q()
  {
    return this.b.getBoolean("has_set_receive_email_account", false);
  }

  public String r()
  {
    return this.b.getString("send_email_pwd", "a1f0ff12d492b607beceac79a44fa743d0c3804faf7f793c");
  }

  public boolean s()
  {
    return this.b.getBoolean("has_set_send_email_pwd", false);
  }
}

905422897

19MB  ..........................
↑刚刚下载错了 上面是屁话 请无视- -

ja45521

905422897 发表于 2015-10-24 16:29
key 是 s开头的 6位数  我把样本删了...忘记了  以前一位大牛教我的  然后用key 解密一下 就可以了....

我研究研究。可以加我QQ 403609356，指导下么

asdfgasd

坐等大神粗现

wuhua2009

坐等大神解答，希望能看短信截图。

2317909768

楼下是大神

905422897

加密内容是这几个
13679738524
13679738524@163.com
szzxbsyuugzvdnsq         邮箱密码已失效
2015-09-08 09:08:22    这个是软件的到期时间

905422897

话说 今天貌似没开放注册  楼主是怎么注册的
楼主是南宁的?

ja45521

细瞧、潇洒哥 发表于 2015-10-24 15:06
你应该把那短信内容截图。

一个月多月前的短信了，恢复出厂设置啥都没了

xiduosi

2015年10月24日注册

ja45521

905422897 发表于 2015-10-24 15:46
话说 今天貌似没开放注册  楼主是怎么注册的
楼主是南宁的?

我也不知道咋注册的，买个邀请码  注册的啊