0321effae359119534538a676e0dc5f2_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0321effae359119534538a676e0dc5f2_JaffaCakes118
Size

4.8MB
MD5

0321effae359119534538a676e0dc5f2
SHA1

c63df2e40d0feca2eea26fa75f0d23960dc29592
SHA256

411763718abbc7e10cce9cc8e855ce5717ef300e438df8eb6773ff646012e776
SHA512

d01b7ff184d545446c70da0dcad46d4173b4472e16b97eb07089b77552a451ebcf338bd25fe5228e8260660c68ff9d1d225f8082edab6736dc97c1b9f59744d2
SSDEEP

98304:k2qoM+6wf1BF7aI9lXwQHQgWWPiIpu4lpe7FA/o/g1kQW1BJQJnyad:kdoeOzXwNoul5Aw/g1oQgM

Score

6^/10

Malware Config

Signatures

Declares broadcast receivers with permission to handle system events 1 IoCs

description	ioc
Required by device admin receivers to bind with the system. Allows apps to manage device administration features.	android.permission.BIND_DEVICE_ADMIN

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 18 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows an application to collect component usage statistics.	android.permission.PACKAGE_USAGE_STATS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Files

0321effae359119534538a676e0dc5f2_JaffaCakes118
.apk android arch:arm

com.tencent.qlauncher.lite

com.tencent.qlauncher.home.Launcher

Activities

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.qlauncher.home.Launcher

android.intent.action.MAIN
android.intent.action.MAIN
com.tencent.qlauncher.action.QLOCK
com.tencent.qlauncher.action.QUERY
com.tencent.qlauncher.action.themePlatform

com.tencent.settings.SettingsActivity

com.tencent.qlauncher.action.setting

com.tencent.qlauncher.preference.MockHomeSwitch

android.intent.action.MAIN

com.tencent.qlauncher.wallpaper.v2.WallpaperGroupListActivity

com.tencent.qlauncher.beautify.BEAUTY_WALLPAPER_GROUP_PAGE

com.tencent.qlauncher.shortcut.toolfolder.CreateToolFolderShortcutActivity

android.intent.action.CREATE_SHORTCUT

com.tencent.qlauncher.beautify.BeautifyShellActivity

com.tencent.qlauncher.action.ThemeMarket
com.tencent.qlauncher.beautify.action.SHELL
com.tencent.qlauncher.beautify.NEW_WALLPAPER

com.tencent.qlauncher.theme.ui.ThemeListActivity

com.tencent.qlauncher.beautify.BEAUTY_THEME_CLASSIFICATION_PAGE

com.tencent.qlauncher.theme.ui.ThemeDetailActivity

com.tencent.qlauncher.beautify.NEW_THEME
android.intent.action.VIEW

com.tencent.qlauncher.shortcut.CreateCLeanMemoryShortcutActivity

android.intent.action.CREATE_SHORTCUT

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity1

com.tencent.qmasterplugin.core.PLUGIN

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity2

com.tencent.qmasterplugin.core.PLUGIN

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity3

com.tencent.qmasterplugin.core.PLUGIN

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity4

com.tencent.qmasterplugin.core.PLUGIN

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity5

com.tencent.qmasterplugin.core.PLUGIN

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity6

com.tencent.qmasterplugin.core.PLUGIN

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity7

com.tencent.qmasterplugin.core.PLUGIN

com.tencent.tms.search.activity.SearchMainActivity

android.intent.action.MAIN
android.search.action.GLOBAL_SEARCH
android.intent.action.SEARCH
android.intent.action.ASSIST
com.tencent.qlauncher.search.ACTION_OPEN

Permissions

com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.bbk.launcher2.permission.READ_SETTINGS
com.bbk.launcher2.permission.WRITE_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
com.lenovo.launcher.permission.READ_SETTINGS
com.lenovo.launcher.permission.WRITE_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
com.qiku.launcher.permission.READ_SETTINGS
com.qiku.launcher.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
com.meizu.flyme.launcher.permission.READ_SETTINGS
com.meizu.flyme.launcher.permission.WRITE_SETTINGS
com.ztemt.launcher.permission.READ_SETTINGS
com.ztemt.launcher.permission.WRITE_SETTINGS
cn.nubia.launcher.permission.READ_SETTINGS
cn.nubia.launcher.permission.WRITE_SETTINGS
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.VIBRATE
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.ACCESS_FINE_LOCATION
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
android.permission.READ_LOGS
android.permission.READ_CONTACTS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_COARSE_LOCATION
android.permission.EXPAND_STATUS_BAR
android.permission.ACCESS_LOCATION_EXTRA_COMMANDS
android.permission.READ_SMS
android.permission.READ_CALL_LOG
android.permission.WRITE_SETTINGS
android.permission.READ_SYNC_SETTINGS
android.permission.WRITE_SYNC_SETTINGS
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.KILL_BACKGROUND_PROCESSES
com.android.launcher.permission.INSTALL_SHORTCUT
com.android.launcher.permission.UNINSTALL_SHORTCUT
android.permission.WAKE_LOCK
com.android.ContactWidget.permission.READ_SETTINGS
com.android.ContactWidget.permission.WRITE_SETTINGS
android.permission.INTERACT_ACROSS_USERS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS
android.permission.MANAGE_ACCOUNTS
android.permission.READ_SYNC_STATS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.DISABLE_KEYGUARD
android.permission.RECORD_AUDIO
android.permission.SYSTEM_ALERT_WINDOW
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.GET_TASKS
android.permission.CHANGE_WIFI_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.WRITE_SETTINGS
android.permission.CHANGE_CONFIGURATION
android.permission.PACKAGE_USAGE_STATS
android.permission.BIND_ACCESSIBILITY_SERVICE
android.permission.FLASHLIGHT
android.permission.CAMERA
android.permission.SYSTEM_OVERLAY_WINDOW
android.permission.PROCESS_OUTGOING_CALLS

Receivers

com.tencent.qlauncher.engine.download.SysDownloadReceiver

android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED

com.tencent.qlauncher.home.AutoStartLauncherReceiver

android.intent.action.BOOT_COMPLETED

com.tencent.tms.remote.QubeRemoteStaticReceiver

android.net.conn.CONNECTIVITY_CHANGE
com.tencent.qlauncher.lite.remote.wakeupInterval
com.tencent.qlauncher.lite.remote.checkServiceActive

com.tencent.qlauncher.preference.UpdateNetworkReceiver

android.net.conn.CONNECTIVITY_CHANGE

com.tencent.qlauncher.theme.controller.YybThemeReceiver

com.android.qlauncher.lite.action.THEME_DOWNLOAD_COMPLETE

qrom.component.push.core.TCMReceiver

android.intent.action.BOOT_COMPLETED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_DATA_CLEARED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED
qrom.compoent.tcm.CHECK_TCM
qrom.compoent.tcm.action.req

com.tencent.remote.TcmMessageReceiver

qrom.compoent.tcm.action.msg
qrom.compoent.tcm.action.resp

com.tencent.remote.msgtromhelper.NotifyMsgExeReceiver

com.tencent.qlauncher.lite.ACTION_PUSH_NOTIFY_CLICK
com.tencent.qlauncher.lite.ACTION_PUSH_NOTIFY_DELETE

com.tencent.qlauncher.home.CommonReceiver

com.tencent.qlauncher.action.ACTION_UPDATE_SHORTCUT
com.tencent.qlauncher.action.ACTION_DAU_STAT

com.tencent.qlauncher.theme.controller.ThemeCacheUpdateBroadcastReceiver

action_update_theme_data_in_cache

com.tencent.qlauncher.plugin.PluginMsgReceiver

com.tencent.qlauncher.lite_CHECK_PLUGIN_UPDATE_ACTION

com.tencent.qlauncher.feedback.FeedBackDeleteReceiver

com.tencent.qlauncher.lite.FEED_BACK_DELETE_ACTION

com.tencent.qlauncher.engine.download.LauncherDownloadNotificationReceiver

com.tencent.qlauncher.engine.download.DOWNLOAD_STATUS_CHANGED

com.tencent.qlauncher.lite.touchtools.receiver.TouchReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.ACTION_REBOOT
android.intent.action.ACTION_SHUTDOWN
android.intent.action.USER_PRESENT
android.intent.action.PACKAGE_RESTARTED
com.tencent.qlauncher.floatviewservice.destroy

com.tencent.qlauncher.home.StaticReceiver

android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.USER_PRESENT
android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.WALLPAPER_CHANGED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_DATA_CLEARED
android.intent.action.PACKAGE_REPLACED
android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED

com.tencent.tms.qlauncher.engine.download.SysDownloadReceiver

android.intent.action.DOWNLOAD_COMPLETE
android.intent.action.DOWNLOAD_NOTIFICATION_CLICKED

com.tencent.tms.search.main.AppInstallReceiver

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_REMOVED

com.tencent.tms.search.main.HotWordReceiver

com.tencent.tms.search.action.HOTWORD_UPDATE

com.tencent.qlauncher.behavior.PhoneStatReceiver

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

Services

com.tencent.qlauncher.daemon.RestartService

com.tencent.qrom.tms.guard.ACTION_RESTART_SERVICE

com.tencent.tms.engine.statistics.QubeStatService

com.tencent.qlauncher.lite.action.stat

com.tencent.qlauncher.home.IncreasePriorityService

com.tencent.qlauncher.lite.action.STATUSBAR_TOOL

qrom.component.push.core.TCMService

qrom.compoent.tcm.action.start

com.tencent.qmasterplugin.core.proxy.PluginProxyAccessibilityService

android.accessibilityservice.AccessibilityService

com.tencent.qlauncher.lite.touchtools.FloatViewService

android.intent.action.MAIN

com.tencent.qlauncher.accessibility.LauncherAccessibilityService

android.accessibilityservice.AccessibilityService

com.tencent.qlauncher.account.sync.SyncService

android.content.SyncAdapter

com.tencent.qlauncher.account.sync.AccountService

android.accounts.AccountAuthenticator

com.tencent.qlauncher.flashlight.FlashService

com.tencent.qlauncher.flashlight.Action
544.apk
.apk android

com.tencent.qlauncher.theme544
lock
.apk android

com.tencent.qlauncher.lite.onekeylock

com.tencent.qlauncher.lite.onekeylock.LockerActivity

Activities

com.tencent.qlauncher.lite.onekeylock.LockerActivity

android.intent.action.MAIN

Receivers

com.tencent.qlauncher.lite.onekeylock.LockerDeviceAdminReceiver

android.app.action.DEVICE_ADMIN_ENABLED

Android Permissions

0321effae359119534538a676e0dc5f2_JaffaCakes118

Permissions

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.bbk.launcher2.permission.READ_SETTINGS

com.bbk.launcher2.permission.WRITE_SETTINGS

com.huawei.android.launcher.permission.READ_SETTINGS

com.huawei.android.launcher.permission.WRITE_SETTINGS

com.lenovo.launcher.permission.READ_SETTINGS

com.lenovo.launcher.permission.WRITE_SETTINGS

com.oppo.launcher.permission.READ_SETTINGS

com.oppo.launcher.permission.WRITE_SETTINGS

com.qiku.launcher.permission.READ_SETTINGS

com.qiku.launcher.permission.WRITE_SETTINGS

com.android.launcher3.permission.READ_SETTINGS

com.android.launcher3.permission.WRITE_SETTINGS

com.meizu.flyme.launcher.permission.READ_SETTINGS

com.meizu.flyme.launcher.permission.WRITE_SETTINGS

com.ztemt.launcher.permission.READ_SETTINGS

com.ztemt.launcher.permission.WRITE_SETTINGS

cn.nubia.launcher.permission.READ_SETTINGS

cn.nubia.launcher.permission.WRITE_SETTINGS

android.permission.SET_WALLPAPER

android.permission.SET_WALLPAPER_HINTS

android.permission.VIBRATE

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.INTERNET

android.permission.READ_PHONE_STATE

android.permission.ACCESS_FINE_LOCATION

android.permission.MOUNT_UNMOUNT_FILESYSTEMS

android.permission.READ_LOGS

android.permission.READ_CONTACTS

android.permission.CHANGE_WIFI_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_COARSE_LOCATION

android.permission.EXPAND_STATUS_BAR

android.permission.ACCESS_LOCATION_EXTRA_COMMANDS

android.permission.READ_SMS

android.permission.READ_CALL_LOG

android.permission.WRITE_SETTINGS

android.permission.READ_SYNC_SETTINGS

android.permission.WRITE_SYNC_SETTINGS

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.KILL_BACKGROUND_PROCESSES

com.android.launcher.permission.INSTALL_SHORTCUT

com.android.launcher.permission.UNINSTALL_SHORTCUT

android.permission.WAKE_LOCK

com.android.ContactWidget.permission.READ_SETTINGS

com.android.ContactWidget.permission.WRITE_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.tencent.qlauncher.lite

com.tencent.qlauncher.home.Launcher

Activities

com.tencent.tauth.AuthActivity

com.tencent.qlauncher.home.Launcher

com.tencent.settings.SettingsActivity

com.tencent.qlauncher.preference.MockHomeSwitch

com.tencent.qlauncher.wallpaper.v2.WallpaperGroupListActivity

com.tencent.qlauncher.shortcut.toolfolder.CreateToolFolderShortcutActivity

com.tencent.qlauncher.beautify.BeautifyShellActivity

com.tencent.qlauncher.theme.ui.ThemeListActivity

com.tencent.qlauncher.theme.ui.ThemeDetailActivity

com.tencent.qlauncher.shortcut.CreateCLeanMemoryShortcutActivity

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity1

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity2

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity3

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity4

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity5

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity6

com.tencent.qmasterplugin.core.stub.ui.PluginStubActivity7

com.tencent.tms.search.activity.SearchMainActivity

Permissions

Receivers

com.tencent.qlauncher.engine.download.SysDownloadReceiver

com.tencent.qlauncher.home.AutoStartLauncherReceiver

com.tencent.tms.remote.QubeRemoteStaticReceiver

com.tencent.qlauncher.preference.UpdateNetworkReceiver

com.tencent.qlauncher.theme.controller.YybThemeReceiver

qrom.component.push.core.TCMReceiver

com.tencent.remote.TcmMessageReceiver

com.tencent.remote.msgtromhelper.NotifyMsgExeReceiver

com.tencent.qlauncher.home.CommonReceiver

com.tencent.qlauncher.theme.controller.ThemeCacheUpdateBroadcastReceiver

com.tencent.qlauncher.plugin.PluginMsgReceiver

com.tencent.qlauncher.feedback.FeedBackDeleteReceiver

com.tencent.qlauncher.engine.download.LauncherDownloadNotificationReceiver

com.tencent.qlauncher.lite.touchtools.receiver.TouchReceiver

com.tencent.qlauncher.home.StaticReceiver

com.tencent.tms.qlauncher.engine.download.SysDownloadReceiver

com.tencent.tms.search.main.AppInstallReceiver

com.tencent.tms.search.main.HotWordReceiver

com.tencent.qlauncher.behavior.PhoneStatReceiver

Services

com.tencent.qlauncher.daemon.RestartService

com.tencent.tms.engine.statistics.QubeStatService

com.tencent.qlauncher.home.IncreasePriorityService

qrom.component.push.core.TCMService

com.tencent.qmasterplugin.core.proxy.PluginProxyAccessibilityService

com.tencent.qlauncher.lite.touchtools.FloatViewService

com.tencent.qlauncher.accessibility.LauncherAccessibilityService

com.tencent.qlauncher.account.sync.SyncService

com.tencent.qlauncher.account.sync.AccountService

com.tencent.qlauncher.flashlight.FlashService

com.tencent.qlauncher.theme544

com.tencent.qlauncher.lite.onekeylock

com.tencent.qlauncher.lite.onekeylock.LockerActivity

Activities

com.tencent.qlauncher.lite.onekeylock.LockerActivity

Receivers

com.tencent.qlauncher.lite.onekeylock.LockerDeviceAdminReceiver

Android Permissions

0321effae359119534538a676e0dc5f2_JaffaCakes118