880b64fe5dc8d827aacc3526a834229ecfaba505a7361c1494cb06207bbc8433

Sharing

Copy URL Twitter E-mail

General

Target

880b64fe5dc8d827aacc3526a834229ecfaba505a7361c1494cb06207bbc8433
Size

11.8MB
MD5

a7b7a204066ac91e4c37663332f6948d
SHA1

6ca6b1c6bf8b9bfafa042c1430fb96d312017992
SHA256

880b64fe5dc8d827aacc3526a834229ecfaba505a7361c1494cb06207bbc8433
SHA512

1d04ac8d4a3e59bae0ccf11bfac09a9eab73a9b4dc01174b140455ada4a478ea77361cf9a2737c5254c301ec80298694b42d1b8d9ea50dac47a11db2d04be41a
SSDEEP

196608:4X2QcUytCUXrGv7SCbJEoVLeIzxM6DczObQRlPEC12I1iCbcR8ygTrQ0cxk9dnDx:jrUyjrGv7ZJEoVygxMkw6Q7DzQR8bTMa

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

880b64fe5dc8d827aacc3526a834229ecfaba505a7361c1494cb06207bbc8433
.apk android arch:arm

com.zte.heartyservice

com.zxing.activity.CaptureActivity

Activities

.main.HeartServiceActivity

com.zte.START_ACTIVITY.PHONE_ASSISTANT

.main.SoftWareActivityNew

intent.action.startActivity.SOFTWARE

.main.EditShortCutActivity

intent.action.startActivity.SHORTCUT_EDIT

.speedup.MainSpeedingActivity

com.zte.heartyservice.intent.action.startActivity.SPEED_UP

.net.NetTrafficHost

com.zte.heartyservice.intent.action.startActivity.NET_SCANNER

.net.NetTrafficStatsOfDayActivity

com.zte.heartyservice.intent.action.startActivity.NET_STATS_OF_DAY

.permission.PermissionHost

com.zte.heartyservice.intent.action.startActivity.PERMISSION_SCANNER

com.zte.heartyservice.porting.All.PortingLaunchingActivity

com.zte.heartyservice.intent.action.startActivity.VIRUS_SCANNER

.intercept.Common.AddModelActivity

com.zte.intent.action.ADD_BLACK_WHITE_LIST
android.intent.action.START_ActiveMainAddBlock_BLOCK
android.intent.action.START_ActiveMainAddBlock

com.zte.heartyservice.antivirus.Tencent.ZTEVieusScanningActivity

quick_scan_action
overall_scan_action

com.zte.heartyservice.intercept.Tencent.ZTEBlackWhiteListActivity

com.zte.heartyservice.intent.action.startActivity.BlackWhiteList

.apksmanager.MainApksManagerActivity

com.zte.heartyservice.intent.action.startActivity.PACKAGE_MANAGEMENT

.apksmanager.InstalledSoftwareFragmentActivity

com.zte.heartyservice.intent.action.startActivity.INSTALLED_SOFTWARE

.apksmanager.SoftwareMoveFragmentActivity

com.zte.heartyservice.intent.action.startActivity.SOFTWARE_MOVE

.apksmanager.DefaultSettingActivity

com.zte.heartyservice.intent.action.startActivity.DEFAULT_APPLICATION

.examination.MainExamActivity

com.zte.heartyservice.intent.action.startActivity.EXAMINATION

.antieavesdrop.MainAntiEavesdropActivity

com.zte.heartyservice.intent.action.startActivity.ANTIEAVESDROP

.setting.SettingsFragmentActivity

com.zte.heartyservice.intent.action.startActivity.SETTING

.privacy.MainPrivacyActivity

com.zte.heartyservice.intent.action.startActivity.PRIVACY_PROTECT

.privacy.ImageVideoActivity

com.zte.heartyservice.intent.action.startActivity.PRIVACY_CAMERA_VIDEO

.privacy.OtherFilesActivity

com.zte.heartyservice.intent.action.startActivity.PRIVACY_OTHER_FILES

.privacy.FileManagerActivity

intent.action.startActivity.ROOT_SD_BROWSE
intent.action.startActivity.DOWNLOAD_BROWSE
intent.action.startActivity.DCIM_BROWSE
intent.action.startActivity.MUSIC_BROWSE

.privacy.SmsExplorerActivity

intent.action.startActivity.PRIVACY_MESSAGE_BROWER

com.zte.filexplorer.TextEditor

android.content.Intent.ACTION_VIEW

.privacy.ContactsSmsCallLogFragmentActivity

intent.action.startActivity.PRIVACY_CONTACTS_SMS_CALLLOG

.privacy.CallLogExplorerActivity

intent.action.startActivity.PRIVACY_CALLLOG_BROWER

.privacy.ContactsSelectActivity

intent.action.startActivity.PRIVACY_CONTACTS_SELECT

.common.ui.SelectItemFragmentActivity

com.zte.ui.SelectItemFragment

.privacy.PasswordSetting

com.zte.heartyservice.intent.action.startActivity.PRIVACY_LOGIN
com.zte.heartyservice.intent.action.ACTION_RESET_PRIVACY_PASSWORD
com.zte.heartyservice.intent.action.ACTION_SET_DISGUISE_PASSWORD
com.zte.heartyservice.intent.action.ACTION_PRIVACY_RETRIEVE_SET

.main.NewSecurityActivity

com.zte.heartyservice.intent.action.startActivity.SECURITY_ACTIVITY

.main.MarketStartActivity

com.zte.heartyservice.intent.action.startActivity.MARKET_START

.privacy.PrivacyStartActivity

com.zte.heartyservice.intent.action.startActivity.PRIVACY_START

.interceptad.AdvertisementActivity

com.zte.heartyservice.intent.action.startActivity.ad_intercept

.privacy.AppLockStartActivity

com.zte.heartyservice.intent.action.startActivity.APP_LOCK_START

com.zte.heartyservice.privacy.AddPrivacyActivity

com.zte.heartyservice.intent.action.ADD_PRIVACY_CONTACT
com.zte.heartyservice.intent.action.ADD_PRIVACY_CONTACT_INTERNAL
com.zte.heartyservice.intent.action.ADD_PRIVACY_SMS
com.zte.heartyservice.intent.action.ADD_PRIVACY_FILE
com.zte.heartyservice.intent.action.ADD_PRIVACY_IMAGE
com.zte.heartyservice.intent.action.ADD_PRIVACY_VIDEO

.packageinstaller.PackageInstallerActivity

android.intent.action.VIEW
android.intent.action.INSTALL_PACKAGE
android.intent.action.INSTALL_PACKAGE

.intercept.Common.NumberInterceptSet

com.zte.heartyservice.intent.action.BLACK_WHITE_LIST_SET
com.zte.heartyservice.intent.action.BLACK_LIST_MODIFY

com.zxing.activity.CaptureActivity

android.intent.action.MAIN

.appwidget.AccAnimationActivity

android.intent.action.MAIN

.antiunload.AntiUnloadStartActivity

com.zte.heartyservice.intent.action.startActivity.ANTI_UNLOAD_START

Permissions

android.permission.WRITE_SETTINGS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.VIBRATE
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_PACKAGE_SIZE
android.permission.CLEAR_APP_CACHE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
android.permission.SET_ALWAYS_FINISH
android.permission.DISABLE_KEYGUARD
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_MOCK_LOCATION
android.permission.ACCESS_DRM
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_PHONE_STATE
android.permission.DELETE_CACHE_FILES
android.permission.MOVE_PACKAGE
android.permission.CHANGE_COMPONENT_ENABLED_STATE
android.permission.UPDATE_APP_OPS_STATS
com.android.launcher.permission.READ_SETTINGS
android.permission.ZTE_MANAGE_NETWORK_POLICY
android.permission.READ_NETWORK_USAGE_HISTORY
android.permission.EXPAND_STATUS_BAR
android.permission.BATTERY_STATS
android.permission.READ_CONTACTS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_MMS
android.permission.READ_SMS
android.permission.READ_MMS
android.permission.WRITE_SMS
android.permission.RECEIVE_WAP_PUSH
android.permission.MODIFY_PHONE_STATE
android.permission.INTERNET
android.permission.CALL_PHONE
com.tencent.tmsecure.permission.ACCESS_SYN_SERVICE
android.permission.RESTART_PACKAGES
android.permission.WRITE_CONTACTS
android.permission.SEND_SMS
android.permission.DELETE_PACKAGES
android.permission.WRITE_MEDIA_STORAGE
android.permission.GET_TASKS
android.permission.INSTALL_PACKAGES
android.permission.DELETE_PACKAGES
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.INTERACT_ACROSS_USERS
android.permission.ZTE_MANAGE_NOTIFICATION
android.permission.ZTE_HEARTYSERVICE_MANAGEMENT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.BIND_APPWIDGET
android.permission.PROCESS_OUTGOING_CALLS
com.android.permission.AIRPLANEMODE_SWITCH
android.permission.READ_LOGS
android.permission.INTERNET
android.permission.ACCESS_NETWORK_STATE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.WRITE_SETTINGS

Receivers

.intercept.Tencent.CallFirewallReceiver

com.zte.heartyservice.intent.action.call_firewall_on
com.zte.heartyservice.intent.action.call_firewall_off

.appwidget.SpeedupWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

.main.StartReceiver

android.intent.action.BOOT_COMPLETED

.privacy.SmsReceiver

PRIVACY.SENT_SMS_ACTION

.privacy.DeliverReceiver

PRIVACY.DELIVERED_SMS_ACTION

.main.AppDownloadCompleteReceiver

qqplaza.intent.action.APP_DOWNLOAD_COMPLETE

.main.IndicatorBroadcastReceiver

com.zte.heartyservice.action.CLICK_NOTIFICATION

.main.OtherReceiver

android.net.conn.CONNECTIVITY_CHANGE
com.zte.heartyservice.VirusLibAutoUpdate

.main.SafeguardReceiver

android.net.conn.CONNECTIVITY_CHANGE
com.zte.heartyservice.r.notice

.antiunload.AntiUnloadAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED

com.umeng.message.UmengBroadcastReceiver

org.agoo.android.intent.action.RECEIVE
com.zte.heartyservice.intent.action.COMMAND
org.agoo.android.intent.action.RE_ELECTION_V2

Services

.main.HeartyServiceZTEHelp

com.zte.heartyservice.intent.action.startService.ZTEHelp

.speedup.SpeedUpService

com.zte.heartyservice.intent.action.startService.SPEEDUPSERVICE

.intercept.Tencent.SecureService

com.tencent.tmsecure.action.SMS_RECEIVED

.apksmanager.ApksManagerService

com.zte.heartyservice.intent.action.startService.APKMANAGERSERVICE

.setting.LockScreenCleanService

com.zte.heartyservice.intent.action.startService.CLEAN_APP

.main.HSService

com.zte.heartyservice.intent.action.startService.HSService

com.umeng.message.UmengService

com.zte.heartyservice.intent.action.START
com.zte.heartyservice.intent.action.COCKROACH
org.agoo.android.intent.action.PING

org.android.agoo.service.ElectionService

org.agoo.android.intent.action.ELECTION_V2

Android Permissions

880b64fe5dc8d827aacc3526a834229ecfaba505a7361c1494cb06207bbc8433

Permissions

android.permission.WRITE_SETTINGS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.SET_ALWAYS_FINISH

android.permission.DISABLE_KEYGUARD

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_DRM

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.DELETE_CACHE_FILES

android.permission.MOVE_PACKAGE

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.UPDATE_APP_OPS_STATS

com.android.launcher.permission.READ_SETTINGS

android.permission.ZTE_MANAGE_NETWORK_POLICY

android.permission.READ_NETWORK_USAGE_HISTORY

android.permission.EXPAND_STATUS_BAR

android.permission.BATTERY_STATS

android.permission.READ_CONTACTS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.READ_SMS

android.permission.READ_MMS

android.permission.WRITE_SMS

android.permission.RECEIVE_WAP_PUSH

android.permission.MODIFY_PHONE_STATE

android.permission.INTERNET

android.permission.CALL_PHONE

com.tencent.tmsecure.permission.ACCESS_SYN_SERVICE

android.permission.RESTART_PACKAGES

Sharing

General

Malware Config

Signatures

Files

com.zte.heartyservice

com.zxing.activity.CaptureActivity

Activities

.main.HeartServiceActivity

.main.SoftWareActivityNew

.main.EditShortCutActivity

.speedup.MainSpeedingActivity

.net.NetTrafficHost

.net.NetTrafficStatsOfDayActivity

.permission.PermissionHost

com.zte.heartyservice.porting.All.PortingLaunchingActivity

.intercept.Common.AddModelActivity

com.zte.heartyservice.antivirus.Tencent.ZTEVieusScanningActivity

com.zte.heartyservice.intercept.Tencent.ZTEBlackWhiteListActivity

.apksmanager.MainApksManagerActivity

.apksmanager.InstalledSoftwareFragmentActivity

.apksmanager.SoftwareMoveFragmentActivity

.apksmanager.DefaultSettingActivity

.examination.MainExamActivity

.antieavesdrop.MainAntiEavesdropActivity

.setting.SettingsFragmentActivity

.privacy.MainPrivacyActivity

.privacy.ImageVideoActivity

.privacy.OtherFilesActivity

.privacy.FileManagerActivity

.privacy.SmsExplorerActivity

com.zte.filexplorer.TextEditor

.privacy.ContactsSmsCallLogFragmentActivity

.privacy.CallLogExplorerActivity

.privacy.ContactsSelectActivity

.common.ui.SelectItemFragmentActivity

.privacy.PasswordSetting

.main.NewSecurityActivity

.main.MarketStartActivity

.privacy.PrivacyStartActivity

.interceptad.AdvertisementActivity

.privacy.AppLockStartActivity

com.zte.heartyservice.privacy.AddPrivacyActivity

.packageinstaller.PackageInstallerActivity

.intercept.Common.NumberInterceptSet

com.zxing.activity.CaptureActivity

.appwidget.AccAnimationActivity

.antiunload.AntiUnloadStartActivity

Permissions

Receivers

.intercept.Tencent.CallFirewallReceiver

.appwidget.SpeedupWidgetProvider

.main.StartReceiver

.privacy.SmsReceiver

.privacy.DeliverReceiver

.main.AppDownloadCompleteReceiver

.main.IndicatorBroadcastReceiver

.main.OtherReceiver

.main.SafeguardReceiver

.antiunload.AntiUnloadAdminReceiver

com.umeng.message.UmengBroadcastReceiver

Services

.main.HeartyServiceZTEHelp

.speedup.SpeedUpService

.intercept.Tencent.SecureService

.apksmanager.ApksManagerService

.setting.LockScreenCleanService

.main.HSService

com.umeng.message.UmengService

org.android.agoo.service.ElectionService

Android Permissions

880b64fe5dc8d827aacc3526a834229ecfaba505a7361c1494cb06207bbc8433