5446d738051038636348f43d23fb533a77fbb99101564dd056d46b5490c3985c

Sharing

Copy URL

Twitter E-mail

General

Target

5446d738051038636348f43d23fb533a77fbb99101564dd056d46b5490c3985c
Size

12.3MB
MD5

dc3f49476901d48e961ac75702d97b43
SHA1

5e8219bc12c3bc9e14364f1ddc9ad0e54f0c27e1
SHA256

5446d738051038636348f43d23fb533a77fbb99101564dd056d46b5490c3985c
SHA512

75a5049f92329d9728f7108072629ae189459b9d190e02d3d1bc8de36517b2476534c510dae5fc17127715a660c5fb86d85be23295d79709ce6e67491e9cb034
SSDEEP

393216:pzjjra0p+HP9dl44NubgO1D0dn4xEjsMCe:5jjrZ+HVd6RbgOsdjEe

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Files

5446d738051038636348f43d23fb533a77fbb99101564dd056d46b5490c3985c
.apk android arch:arm

com.zte.heartyservice

com.zxing.activity.CaptureActivity

Activities

.main.HeartServiceActivity

com.zte.START_ACTIVITY.PHONE_ASSISTANT

.main.SecurityActivity

intent.action.startActivity.SECURITY

.main.SoftWareActivityNew

intent.action.startActivity.SOFTWARE

.main.EditShortCutActivity

intent.action.startActivity.SHORTCUT_EDIT

.speedup.MainSpeedingActivity

com.zte.heartyservice.intent.action.startActivity.SPEED_UP

.net.NetTrafficHost

com.zte.heartyservice.intent.action.startActivity.NET_SCANNER

.net.NetTrafficStatsOfDayActivity

com.zte.heartyservice.intent.action.startActivity.NET_STATS_OF_DAY

.permission.PermissionHost

com.zte.heartyservice.intent.action.startActivity.PERMISSION_SCANNER

com.zte.heartyservice.porting.All.PortingLaunchingActivity

com.zte.heartyservice.intent.action.startActivity.VIRUS_SCANNER

.intercept.Common.AddModelActivity

com.zte.intent.action.ADD_BLACK_WHITE_LIST
android.intent.action.START_ActiveMainAddBlock_BLOCK
android.intent.action.START_ActiveMainAddBlock

com.zte.heartyservice.antivirus.Tencent.ZTEVieusScanningActivity

quick_scan_action
overall_scan_action

com.zte.heartyservice.intercept.Tencent.ZTEBlackWhiteListActivity

com.zte.heartyservice.intent.action.startActivity.BlackWhiteList

.power.PowerManagerPhoneActivity

com.zte.heartyservice.intent.action.startActivity.SAVE_ELECTRICITY

.apksmanager.MainApksManagerActivity

com.zte.heartyservice.intent.action.startActivity.PACKAGE_MANAGEMENT

.apksmanager.InstalledSoftwareFragmentActivity

com.zte.heartyservice.intent.action.startActivity.INSTALLED_SOFTWARE

.apksmanager.SoftwareMoveFragmentActivity

com.zte.heartyservice.intent.action.startActivity.SOFTWARE_MOVE

.apksmanager.DefaultSettingActivity

com.zte.heartyservice.intent.action.startActivity.DEFAULT_APPLICATION

.examination.MainExamActivity

com.zte.heartyservice.intent.action.startActivity.EXAMINATION

.antieavesdrop.MainAntiEavesdropActivity

com.zte.heartyservice.intent.action.startActivity.ANTIEAVESDROP

.setting.SettingsFragmentActivity

com.zte.heartyservice.intent.action.startActivity.SETTING

.privacy.MainPrivacyActivity

com.zte.heartyservice.intent.action.startActivity.PRIVACY_PROTECT

.privacy.ImageVideoActivity

com.zte.heartyservice.intent.action.startActivity.PRIVACY_CAMERA_VIDEO

.privacy.OtherFilesActivity

com.zte.heartyservice.intent.action.startActivity.PRIVACY_OTHER_FILES

.privacy.FileManagerActivity

intent.action.startActivity.ROOT_SD_BROWSE
intent.action.startActivity.DOWNLOAD_BROWSE
intent.action.startActivity.DCIM_BROWSE
intent.action.startActivity.MUSIC_BROWSE

.privacy.SmsExplorerActivity

intent.action.startActivity.PRIVACY_MESSAGE_BROWER

com.zte.filexplorer.TextEditor

android.content.Intent.ACTION_VIEW

.privacy.ContactsSmsCallLogFragmentActivity

intent.action.startActivity.PRIVACY_CONTACTS_SMS_CALLLOG

.privacy.CallLogExplorerActivity

intent.action.startActivity.PRIVACY_CALLLOG_BROWER

.privacy.ContactsSelectActivity

intent.action.startActivity.PRIVACY_CONTACTS_SELECT

.common.ui.SelectItemFragmentActivity

com.zte.ui.SelectItemFragment

.privacy.PasswordSetting

com.zte.heartyservice.intent.action.startActivity.PRIVACY_LOGIN
com.zte.heartyservice.intent.action.ACTION_RESET_PRIVACY_PASSWORD
com.zte.heartyservice.intent.action.ACTION_SET_DISGUISE_PASSWORD

.main.NewSecurityActivity

com.zte.heartyservice.intent.action.startActivity.SECURITY_ACTIVITY

.main.MarketStartActivity

com.zte.heartyservice.intent.action.startActivity.MARKET_START

.privacy.PrivacyStartActivity

com.zte.heartyservice.intent.action.startActivity.PRIVACY_START

.interceptad.AdvertisementActivity

com.zte.heartyservice.intent.action.startActivity.ad_intercept

.privacy.AppLockStartActivity

com.zte.heartyservice.intent.action.startActivity.APP_LOCK_START

com.zte.heartyservice.privacy.AddPrivacyActivity

com.zte.heartyservice.intent.action.ADD_PRIVACY_CONTACT
com.zte.heartyservice.intent.action.ADD_PRIVACY_CONTACT_INTERNAL
com.zte.heartyservice.intent.action.ADD_PRIVACY_SMS
com.zte.heartyservice.intent.action.ADD_PRIVACY_FILE
com.zte.heartyservice.intent.action.ADD_PRIVACY_IMAGE
com.zte.heartyservice.intent.action.ADD_PRIVACY_VIDEO

.packageinstaller.PackageInstallerActivity

android.intent.action.VIEW
android.intent.action.INSTALL_PACKAGE
android.intent.action.INSTALL_PACKAGE

.intercept.Common.NumberInterceptSet

com.zte.heartyservice.intent.action.BLACK_WHITE_LIST_SET
com.zte.heartyservice.intent.action.BLACK_LIST_MODIFY

com.zxing.activity.CaptureActivity

android.intent.action.MAIN

.appwidget.AccAnimationActivity

android.intent.action.MAIN

Permissions

android.permission.WRITE_SETTINGS
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.VIBRATE
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.WRITE_SECURE_SETTINGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.GET_PACKAGE_SIZE
android.permission.CLEAR_APP_CACHE
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.ACCESS_FINE_LOCATION
android.permission.WAKE_LOCK
android.permission.SET_ALWAYS_FINISH
android.permission.DISABLE_KEYGUARD
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.RECORD_AUDIO
android.permission.CAMERA
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.ACCESS_MOCK_LOCATION
android.permission.ACCESS_DRM
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_PHONE_STATE
android.permission.DELETE_CACHE_FILES
android.permission.MOVE_PACKAGE
android.permission.CHANGE_COMPONENT_ENABLED_STATE
android.permission.UPDATE_APP_OPS_STATS
com.android.launcher.permission.READ_SETTINGS
android.permission.ZTE_MANAGE_NETWORK_POLICY
android.permission.READ_NETWORK_USAGE_HISTORY
android.permission.EXPAND_STATUS_BAR
android.permission.BATTERY_STATS
android.permission.READ_CONTACTS
android.permission.RECEIVE_SMS
android.permission.RECEIVE_MMS
android.permission.READ_SMS
android.permission.READ_MMS
android.permission.WRITE_SMS
android.permission.RECEIVE_WAP_PUSH
android.permission.MODIFY_PHONE_STATE
android.permission.INTERNET
android.permission.CALL_PHONE
com.tencent.tmsecure.permission.ACCESS_SYN_SERVICE
android.permission.RESTART_PACKAGES
android.permission.WRITE_CONTACTS
android.permission.SEND_SMS
android.permission.DELETE_PACKAGES
android.permission.WRITE_MEDIA_STORAGE
android.permission.GET_TASKS
android.permission.INSTALL_PACKAGES
android.permission.DELETE_PACKAGES
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.INTERACT_ACROSS_USERS
android.permission.ZTE_MANAGE_NOTIFICATION
android.permission.ZTE_HEARTYSERVICE_MANAGEMENT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.BIND_APPWIDGET
android.permission.PROCESS_OUTGOING_CALLS
com.android.permission.AIRPLANEMODE_SWITCH

Receivers

.intercept.Tencent.CallFirewallReceiver

com.zte.heartyservice.intent.action.call_firewall_on
com.zte.heartyservice.intent.action.call_firewall_off

.appwidget.SpeedupWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

.main.StartReceiver

android.intent.action.BOOT_COMPLETED

.privacy.SmsReceiver

PRIVACY.SENT_SMS_ACTION

.privacy.DeliverReceiver

PRIVACY.DELIVERED_SMS_ACTION

.main.AppDownloadCompleteReceiver

qqplaza.intent.action.APP_DOWNLOAD_COMPLETE

.main.IndicatorBroadcastReceiver

com.zte.heartyservice.action.CLICK_NOTIFICATION

.main.OtherReceiver

android.net.conn.CONNECTIVITY_CHANGE
com.zte.heartyservice.VirusLibAutoUpdate

Services

.main.HeartyServiceZTEHelp

com.zte.heartyservice.intent.action.startService.ZTEHelp

.speedup.SpeedUpService

com.zte.heartyservice.intent.action.startService.SPEEDUPSERVICE

.intercept.Tencent.SecureService

com.tencent.tmsecure.action.SMS_RECEIVED

.apksmanager.ApksManagerService

com.zte.heartyservice.intent.action.startService.APKMANAGERSERVICE

.setting.LockScreenCleanService

com.zte.heartyservice.intent.action.startService.CLEAN_APP
zte_software_service.apk
.apk android arch:arm

com.tencent.android.qqplaza4zte

com.tencent.android.qqdownloader.QQDownloader

Activities

com.tencent.android.qqdownloader.QQDownloader

android.intent.action.MAIN
android.intent.action.MAIN

com.tencent.android.ui.SoftWareActivity

android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.open_softwaredetail

com.tencent.android.ui.SearchActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.tencent.android.ui.LocalAPKFileManagerActivity

com.tencent.android.ui.LocalAPKFileManagerActivity

com.tencent.android.ui.MoveAppsActivity

com.tencent.android.ui.MoveAppsActivity

com.tencent.android.ui.UpdateManageActivity

com.tencent.android.ui.UpdateManageActivity

com.tencent.android.ui.LocalSoftInstalledManagerActivity

com.tencent.android.ui.LocalSoftInstalledManagerActivity

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.READ_SETTINGS
android.permission.CHANGE_CONFIGURATION
android.permission.WAKE_LOCK
android.permission.VIBRATE
android.permission.BATTERY_STATS
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.RESTART_PACKAGES
android.permission.GET_PACKAGE_SIZE
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.CAMERA
com.tencent.android.qqdownloader.permission.MMOAUTH_CALLBACK
com.tencent.android.qqdownloader.permission.MM_MESSAGE
android.permission.FLASHLIGHT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.GET_TASKS
android.permission.INSTALL_PACKAGES
android.permission.WRITE_SETTINGS
android.permission.GET_TASKS
android.permission.READ_LOGS

Receivers

com.tencent.android.qqdownloader.wxapi.WXEntryActivity$Register

com.tencent.mm.plugin.openapi.Intent.ACTION_REFRESH_WXAPP
com.tencent.mm.plugin.openapi.Intent.ACTION_HANDLE_APP_REGISTER
com.tencent.mm.plugin.openapi.Intent.ACTION_HANDLE_APP_UNREGISTER

com.tencent.android.receive.NotificationReceiver

com.tencent.android.action.PollTimeup
com.tencent.android.action.PollTimeup.Wakeup
android.net.conn.CONNECTIVITY_CHANGE
com.tencent.android.action.CheckUpdate.BaseTimeWakeup
com.tencent.android.action.CheckUpdate.RandomTimeWakeup
android.intent.action.TIME_SET
android.intent.action.DATE_CHANGED

com.tencent.android.receive.PackageManagerReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.tencent.android.receive.AppUpdateReceiver

qqplaza.intent.action.GET_UPDATABLE_SUM

Services

Android Permissions

5446d738051038636348f43d23fb533a77fbb99101564dd056d46b5490c3985c

Permissions

android.permission.WRITE_SETTINGS

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.ACCESS_WIFI_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.VIBRATE

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.WRITE_SECURE_SETTINGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.GET_PACKAGE_SIZE

android.permission.CLEAR_APP_CACHE

android.permission.KILL_BACKGROUND_PROCESSES

android.permission.ACCESS_FINE_LOCATION

android.permission.WAKE_LOCK

android.permission.SET_ALWAYS_FINISH

android.permission.DISABLE_KEYGUARD

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.RECORD_AUDIO

android.permission.CAMERA

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.ACCESS_MOCK_LOCATION

android.permission.ACCESS_DRM

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_PHONE_STATE

android.permission.DELETE_CACHE_FILES

android.permission.MOVE_PACKAGE

android.permission.CHANGE_COMPONENT_ENABLED_STATE

android.permission.UPDATE_APP_OPS_STATS

com.android.launcher.permission.READ_SETTINGS

android.permission.ZTE_MANAGE_NETWORK_POLICY

android.permission.READ_NETWORK_USAGE_HISTORY

android.permission.EXPAND_STATUS_BAR

android.permission.BATTERY_STATS

android.permission.READ_CONTACTS

android.permission.RECEIVE_SMS

android.permission.RECEIVE_MMS

android.permission.READ_SMS

android.permission.READ_MMS

android.permission.WRITE_SMS

android.permission.RECEIVE_WAP_PUSH

android.permission.MODIFY_PHONE_STATE

android.permission.INTERNET

android.permission.CALL_PHONE

com.tencent.tmsecure.permission.ACCESS_SYN_SERVICE

android.permission.RESTART_PACKAGES

Sharing

General

Malware Config

Signatures

Files

com.zte.heartyservice

com.zxing.activity.CaptureActivity

Activities

.main.HeartServiceActivity

.main.SecurityActivity

.main.SoftWareActivityNew

.main.EditShortCutActivity

.speedup.MainSpeedingActivity

.net.NetTrafficHost

.net.NetTrafficStatsOfDayActivity

.permission.PermissionHost

com.zte.heartyservice.porting.All.PortingLaunchingActivity

.intercept.Common.AddModelActivity

com.zte.heartyservice.antivirus.Tencent.ZTEVieusScanningActivity

com.zte.heartyservice.intercept.Tencent.ZTEBlackWhiteListActivity

.power.PowerManagerPhoneActivity

.apksmanager.MainApksManagerActivity

.apksmanager.InstalledSoftwareFragmentActivity

.apksmanager.SoftwareMoveFragmentActivity

.apksmanager.DefaultSettingActivity

.examination.MainExamActivity

.antieavesdrop.MainAntiEavesdropActivity

.setting.SettingsFragmentActivity

.privacy.MainPrivacyActivity

.privacy.ImageVideoActivity

.privacy.OtherFilesActivity

.privacy.FileManagerActivity

.privacy.SmsExplorerActivity

com.zte.filexplorer.TextEditor

.privacy.ContactsSmsCallLogFragmentActivity

.privacy.CallLogExplorerActivity

.privacy.ContactsSelectActivity

.common.ui.SelectItemFragmentActivity

.privacy.PasswordSetting

.main.NewSecurityActivity

.main.MarketStartActivity

.privacy.PrivacyStartActivity

.interceptad.AdvertisementActivity

.privacy.AppLockStartActivity

com.zte.heartyservice.privacy.AddPrivacyActivity

.packageinstaller.PackageInstallerActivity

.intercept.Common.NumberInterceptSet

com.zxing.activity.CaptureActivity

.appwidget.AccAnimationActivity

Permissions

Receivers

.intercept.Tencent.CallFirewallReceiver

.appwidget.SpeedupWidgetProvider

.main.StartReceiver

.privacy.SmsReceiver

.privacy.DeliverReceiver

.main.AppDownloadCompleteReceiver

.main.IndicatorBroadcastReceiver

.main.OtherReceiver

Services

.main.HeartyServiceZTEHelp

.speedup.SpeedUpService

.intercept.Tencent.SecureService

.apksmanager.ApksManagerService

.setting.LockScreenCleanService

com.tencent.android.qqplaza4zte

com.tencent.android.qqdownloader.QQDownloader

Activities

com.tencent.android.qqdownloader.QQDownloader

com.tencent.android.ui.SoftWareActivity

com.tencent.android.ui.SearchActivity

com.tencent.android.ui.LocalAPKFileManagerActivity

com.tencent.android.ui.MoveAppsActivity

com.tencent.android.ui.UpdateManageActivity

com.tencent.android.ui.LocalSoftInstalledManagerActivity

Permissions

Receivers

com.tencent.android.qqdownloader.wxapi.WXEntryActivity$Register

com.tencent.android.receive.NotificationReceiver

com.tencent.android.receive.PackageManagerReceiver