http://www.{BLOCKED}ox.com/load.php

ANDROIDOS_OBAD.A connects to this possibly malicious URL. This malware disguises itself as Device Administrator app and root app. Once executed, the malware runs in stealth mode. It can also distribute malware via Bluetooth.