81b6a2994ad058c392c2c4049084e22e_JaffaCakes118

General

Target

81b6a2994ad058c392c2c4049084e22e_JaffaCakes118
Size

3.8MB
MD5

81b6a2994ad058c392c2c4049084e22e
SHA1

da1f3459c6a00c60a425bfc03dc29af43523f972
SHA256

3c648f6db7793af88a7978bb39a94bc4c467fbebf7d83bbc1d414eac5a0107a4
SHA512

be0ff98227cc46c8757664b9d5a0168a84438cc3df9be167a485752d790369f9df814e6f0c8eb553c50b3b0c5e0a60e66e1fdc8e6a2232d565632c1ac61b34af
SSDEEP

98304:oKonOfpLQd+UfCkMMA3ZI6zF1AH4tAfqMSwXNg7+S:oKowLQd+BkMDa6zAH4t2qWdO+S

Score

6^/10

Malware Config

Signatures

Requests dangerous framework permissions 17 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION

Files

81b6a2994ad058c392c2c4049084e22e_JaffaCakes118
.apk android arch:arm

com.tencent.qqpimsecure

.ui.activity.SplashActivity

Activities

com.tencent.feedback.eup.ConfirmDialog

com.tencent.mqq.wsd.fb.eup.comfirm

.ui.activity.SplashActivity

android.intent.action.MAIN

.ui.activity.MainActivity

com.tencent.action.quick_optimize

.ui.activity.HelpActivity

tx.intent.action.HelpActivity

.ui.activity.virus.VirusScanActivity

com.tencent.action.virus_scan

.ui.activity.SyncMobileRegisterActivity

com.tencent.qqpimsecure.action_register_sms_sended_to_activity

.ui.activity.market.SoftwareDetailActivity

tx.intent.action.SoftwareDetailActivity

.ui.activity.SyncLoginActivity

tx.intent.action.SyncLoginActivity

Permissions

android.permission.READ_CONTACTS
android.permission.WRITE_CONTACTS
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.READ_PHONE_STATE
android.permission.PROCESS_OUTGOING_CALLS
android.permission.MODIFY_PHONE_STATE
android.permission.CALL_PHONE
android.permission.WRITE_SMS
android.permission.INTERNET
android.permission.VIBRATE
android.permission.GET_TASKS
android.permission.RESTART_PACKAGES
android.permission.GET_PACKAGE_SIZE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.WAKE_LOCK
android.permission.WRITE_EXTERNAL_STORAGE
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.WRITE_APN_SETTINGS
android.permission.READ_APN_SETTINGS
android.permission.WRITE_SETTINGS
android.permission.CHANGE_NETWORK_STATE
android.permission.ACCESS_DOWNLOAD_MANAGER
android.permission.READ_LOGS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.READ_EXTERNAL_STORAGE
android.permission.BROADCAST_STICKY
com.tencent.permission.SHOW_LOCATION
com.tencent.tmsecure.permission.ACCESS_SYN_SERVICE
android.permission.SYSTEM_ALERT_WINDOW
android.permission.CLEAR_APP_CACHE
com.tencent.permission.SHOW_LOCATION
com.tencent.permission.QUICK_OPTIMIZE
com.tencent.permission.VIRUS_SCAN
android.permission.RECEIVE_MMS
android.permission.READ_MMS
android.permission.RECEIVE_WAP_PUSH
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.ACCESS_FINE_LOCATION
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_SURFACE_FLINGER
android.permission.SET_ANIMATION_SCALE
android.permission.WRITE_SYNC_SETTINGS
com.tencent.permission.SHOW_LOCATION
android.permission.READ_INPUT_STATE
android.permission.KILL_BACKGROUND_PROCESSES

Receivers

.service.ConnectionDetector

android.net.conn.CONNECTIVITY_CHANGE

.service.BlueToothReceiver

android.bluetooth.adapter.action.STATE_CHANGED
android.bluetooth.device.action.ACL_CONNECTED
android.bluetooth.device.action.ACL_DISCONNECTED

.widget.TaskManagerWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
com.tencent.qqpimsecure.widget.control

.widget.TaskManagerWidgetProviderMini

android.appwidget.action.APPWIDGET_UPDATE
com.tencent.qqpimsecure.widget.kill

.widget.NetSetWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
android.net.wifi.WIFI_STATE_CHANGED
android.net.wifi.STATE_CHANGE
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.ANY_DATA_STATE
com.netset.action.mybroadcast

.widget.NetworkStateChangeReceiver

android.net.conn.CONNECTIVITY_CHANGE

.service.BootReceiver

android.intent.action.BOOT_COMPLETED

.service.InOutCallReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL
com.tencent.action.SHOW_LOCATION

.service.FastEntrySecureSpace

android.intent.action.NEW_OUTGOING_CALL

com.tencent.qqpim.receiver.SmsSendReceiver

com.tencent.qqpim.action_register_sms_sended

Services

com.tencent.feedback.common.service.UploadService

com.tencent.qqpimsecure
qqwebdisk3.tsp
.apk android

com.tencent.qqpimsecure.plugin

Android Permissions

81b6a2994ad058c392c2c4049084e22e_JaffaCakes118

Permissions

android.permission.READ_CONTACTS

android.permission.WRITE_CONTACTS

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.READ_PHONE_STATE

android.permission.PROCESS_OUTGOING_CALLS

android.permission.MODIFY_PHONE_STATE

android.permission.CALL_PHONE

android.permission.WRITE_SMS

android.permission.INTERNET

android.permission.VIBRATE

android.permission.GET_TASKS

android.permission.RESTART_PACKAGES

android.permission.GET_PACKAGE_SIZE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.CHANGE_WIFI_STATE

android.permission.WAKE_LOCK

android.permission.WRITE_EXTERNAL_STORAGE

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WRITE_APN_SETTINGS

android.permission.READ_APN_SETTINGS

android.permission.WRITE_SETTINGS

android.permission.CHANGE_NETWORK_STATE

android.permission.ACCESS_DOWNLOAD_MANAGER

android.permission.READ_LOGS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.READ_EXTERNAL_STORAGE

android.permission.BROADCAST_STICKY

com.tencent.permission.SHOW_LOCATION

com.tencent.tmsecure.permission.ACCESS_SYN_SERVICE

android.permission.SYSTEM_ALERT_WINDOW

android.permission.CLEAR_APP_CACHE

com.tencent.permission.SHOW_LOCATION

com.tencent.permission.QUICK_OPTIMIZE

com.tencent.permission.VIRUS_SCAN

android.permission.RECEIVE_MMS

android.permission.READ_MMS

android.permission.RECEIVE_WAP_PUSH

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.ACCESS_FINE_LOCATION

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_SURFACE_FLINGER

android.permission.SET_ANIMATION_SCALE

android.permission.WRITE_SYNC_SETTINGS

com.tencent.permission.SHOW_LOCATION

Sharing

General

Malware Config

Signatures

Files

com.tencent.qqpimsecure

.ui.activity.SplashActivity

Activities

com.tencent.feedback.eup.ConfirmDialog

.ui.activity.SplashActivity

.ui.activity.MainActivity

.ui.activity.HelpActivity

.ui.activity.virus.VirusScanActivity

.ui.activity.SyncMobileRegisterActivity

.ui.activity.market.SoftwareDetailActivity

.ui.activity.SyncLoginActivity

Permissions

Receivers

.service.ConnectionDetector

.service.BlueToothReceiver

.widget.TaskManagerWidgetProvider

.widget.TaskManagerWidgetProviderMini

.widget.NetSetWidgetProvider

.widget.NetworkStateChangeReceiver

.service.BootReceiver

.service.InOutCallReceiver

.service.FastEntrySecureSpace

com.tencent.qqpim.receiver.SmsSendReceiver

Services

com.tencent.feedback.common.service.UploadService

com.tencent.qqpimsecure.plugin

Android Permissions

81b6a2994ad058c392c2c4049084e22e_JaffaCakes118