0cbefef8144330ec4baf780d858cacf8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0cbefef8144330ec4baf780d858cacf8_JaffaCakes118
Size

27.3MB
MD5

0cbefef8144330ec4baf780d858cacf8
SHA1

8da55e751d5cfba3a1a80de76a5aa8f86f5150f9
SHA256

683a5201b1067fff69edcc746b4e8a577d9bb22716135b22c84be3efdb45f48f
SHA512

63c862196848a2fe80e14a059a9160dba082e460fc571d8ff98e9c2e03b8d37072b5c8c899b7dd41c25f18571b6508e6b36cca670fdeedc6acaaaee3500537f6
SSDEEP

393216:z4ZowPdn9v3Y7u5Gd5/Ml7CF3khvt9ZpInTNfu9IaAFAhqw6OUNaYOGbZ+brRv1W:0PBYSHlmCvLIlue6hD6DNGMgPRO0gKoN

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 3 IoCs

description	ioc
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by quick settings tile services to bind with the system. Allows apps to add custom tiles to the quick settings menu.	android.permission.BIND_QUICK_SETTINGS_TILE
Required by accessibility services to bind with the system. Allows apps to access accessibility features.	android.permission.BIND_ACCESSIBILITY_SERVICE

Requests dangerous framework permissions 13 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an application to read or write the system settings.	android.permission.WRITE_SETTINGS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Files

0cbefef8144330ec4baf780d858cacf8_JaffaCakes118
.apk android arch:arm

com.tencent.mtt

com.tencent.mtt.SplashActivity

Activities

com.tencent.mtt.SplashActivity

android.intent.action.MAIN

com.tencent.mtt.MainActivity

android.intent.action.VIEW
com.tencent.QQBrowser.action.VIEW
com.tencent.QQBrowser.action.VIEW_IN_NEW
com.tencent.QQBrowser.action.VIEW_IN_CURRENT
com.tencent.QQBrowser.action.VIEW_IN_VALID_WND
com.tencent.QQBrowser.action.VIEW_FROM_MY_VIDEO
android.intent.action.VIEW
android.intent.action.VIEW
com.tencent.qbx.action.SHORTCUT
com.tencent.qbx5.action.SHORTCUT
com.tencent.QQBrowser.action.UPDATE
com.tencent.QQBrowser.action.SHOWVIDEODOWNLOAD
com.tencent.QQBrowser.action.SHOWDOWNLOAD
com.tencent.QQBrowser.action.REFRESH
com.tencent.QQBrowser.action.SEARCH
com.tencent.QQBrowser.action.NETPACKETCAPTURE
android.intent.action.WEB_SEARCH
com.tencent.QQBrowser.action.SHOWFILEDIR
com.tencent.QQBrowser.action.DONOTHING

com.tencent.mtt.businesscenter.spedition.bd.BlockActivity

com.tencent.QQBrowser.action.BDTIPS

com.tencent.mtt.external.yiya.inhost.YiyaWidgetActivity

com.tencent.QQBrowser.action.WIDGET

com.tencent.mtt.external.yiya.inhost.YiyaAsistantActivity

com.tencent.QQBrowser.action.ASISTANT
com.tencent.QQBrowser.action.VOICEINPUT

com.tencent.mtt.search.SearchActivity

com.tencent.QQBrowser.action.SEARCHINPUT

com.tencent.mtt.external.qrcode.inhost.CaptureActivity

com.tencent.mtt.zxing.SCAN

com.tencent.mtt.browser.video.H5VideoThrdcallActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.tencent.mtt.external.reader.thirdcall.ThirdCallDispatchActivity

com.tencent.QQBrowser.action.sdk.document
com.tencent.QQBrowser.action.sdk.folder

com.tencent.mtt.external.reader.thirdcall.ThirdCallFileReaderActivity

android.intent.action.VIEW
android.intent.action.VIEW

.external.reader.thirdcall.ThridCallFilePickerActivity

com.tencent.QQBrowser.action.sdk.picker

com.tencent.mtt.external.reader.thirdcall.ThirdCallMusicReaderActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.tencent.mtt.external.reader.thirdcall.ThirdCallImageReaderActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.tencent.mtt.external.reader.thirdcall.ThirdCallZipReaderActivity

android.intent.action.VIEW
android.intent.action.VIEW

com.tencent.mtt.external.gameplayer.X5GamePlayerActivity

android.intent.action.VIEW
com.tencent.x5gameplayer.action.ACTION_LAUNCH_GAME_OUTSIDE
com.tencent.x5gameplayer.action.SHORTCUT
com.tencent.x5gameplayer.action.SHOW

com.tencent.mtt.external.gameplayer.X5GamePlayerBridgeActivity

com.tencent.tbs.gamesdk.ACTION_LOGIN
com.tencent.tbs.gamesdk.ACTION_SHARE
com.tencent.tbs.gamesdk.ACTION_PAY

com.tencent.mtt.browser.account.inhost.MultiProcessBridgeActivity

com.tencent.mtt.action.MULTIPROCESS_ACTION

com.tencent.mtt.businesscenter.intent.IntentDispatcherActivity

com.tencent.QQBrowser.action.VIEW_IN_FUNC_WND
com.tencent.QQBrowser.action.INTENT_PASSTHROUGH
android.intent.action.VIEW
com.tencent.QQBrowser.action.SHORTCUT
com.tencent.qbx.action.SHORTCUT
android.intent.action.SEND
com.tencent.qbx5.action.SHORTCUT

com.tencent.mtt.browser.share.inhost.FastSpreadEntryActivity

android.intent.action.SEND

com.tencent.tauth.AuthActivity

android.intent.action.VIEW

com.tencent.mtt.browser.desktop.FrequentVisitActvity

android.intent.action.VIEW
com.tencent.QQBrowser.action.frequentvisit

com.tencent.mtt.browser.desktop.baidu.BaiduActivity

android.intent.action.VIEW

com.tencent.mtt.browser.desktop.InsterestDiscoveryActivity

android.intent.action.VIEW
com.tencent.QQBrowser.action.interestRecovery

com.tencent.mtt.browser.file.FileManagerActivity

android.intent.action.GET_CONTENT
android.intent.action.PICK
android.intent.action.RINGTONE_PICKER

com.tencent.midas.qq.APMidasQQWalletActivity

android.intent.action.VIEW

com.tencent.mtt.external.wifi.inhost.WifiLaunchActivity

android.settings.WIFI_SETTINGS
android.net.wifi.PICK_WIFI_NETWORK

Permissions

com.tencent.mtt.base.stat.permission.READ_STATDB
com.tencent.mtt.base.stat.permission.WRITE_STATDB
com.tencent.mtt.permission.MIPUSH_RECEIVE
android.permission.RESTART_PACKAGES
com.tencent.mtt.broadcast
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.READ_PHONE_STATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.INTERNET
android.permission.WAKE_LOCK
android.permission.EXPAND_STATUS_BAR
android.permission.READ_SMS
android.permission.SEND_SMS
android.permission.RECEIVE_SMS
android.permission.CAMERA
android.permission.CALL_PHONE
android.permission.RECORD_AUDIO
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
com.android.alarm.permission.SET_ALARM
android.permission.CHANGE_WIFI_STATE
android.permission.CHANGE_NETWORK_STATE
android.permission.GET_TASKS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.VIBRATE
android.permission.FLASHLIGHT
android.permission.SYSTEM_ALERT_WINDOW
android.permission.SET_WALLPAPER
android.permission.MODIFY_AUDIO_SETTINGS
com.android.launcher.permission.UNINSTALL_SHORTCUT
com.android.launcher.permission.INSTALL_SHORTCUT
android.permission.WRITE_SETTINGS
com.android.launcher.permission.READ_SETTINGS
com.android.launcher.permission.WRITE_SETTINGS
com.google.android.launcher.permission.READ_SETTINGS
com.google.android.launcher.permission.WRITE_SETTINGS
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.WRITE_SETTINGS
com.nd.android.launcher.permission.READ_SETTINGS
com.nd.android.launcher.permission.WRITE_SETTINGS
com.lge.launcher.permission.READ_SETTINGS
com.lge.launcher.permission.WRITE_SETTINGS
com.fede.launcher.permission.READ_SETTINGS
com.fede.launcher.permission.WRITE_SETTINGS
org.adw.launcher.permission.READ_SETTINGS
org.adw.launcher.permission.WRITE_SETTINGS
org.adwfreak.launcher.permission.READ_SETTINGS
org.adwfreak.launcher.permission.WRITE_SETTINGS
org.adw.launcher_donut.permission.READ_SETTINGS
org.adw.launcher_donut.permission.WRITE_SETTINGS
com.tencent.qqlauncher.permission.READ_SETTINGS
com.tencent.qqlauncher.permission.WRITE_SETTINGS
com.android.mylauncher.permission.READ_SETTINGS
com.android.mylauncher.permission.WRITE_SETTINGS
com.huawei.launcher2.permission.READ_SETTINGS
com.huawei.launcher2.permission.WRITE_SETTINGS
com.huawei.launcher3.permission.READ_SETTINGS
com.huawei.launcher3.permission.WRITE_SETTINGS
net.qihoo.launcher.permission.READ_SETTINGS
net.qihoo.launcher.permission.WRITE_SETTINGS
com.dianxinos.dxhome.permission.READ_SETTINGS
com.dianxinos.dxhome.permission.WRITE_SETTINGS
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
com.qihoo360.launcher.permission.READ_SETTINGS
com.qihoo360.launcher.permission.WRITE_SETTINGS
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
com.ztemt.launcher.permission.READ_SETTINGS
com.ztemt.launcher.permission.WRITE_SETTINGS
com.android.launcher3.permission.READ_SETTINGS
com.android.launcher3.permission.WRITE_SETTINGS
com.moxiu.launcher.permission.READ_SETTINGS
com.moxiu.launcher.permission.WRITE_SETTINGS
com.iLoong.permission.READ_SETTINGS
com.iLoong.permission.WRITE_SETTINGS
telecom.mdesk.permission.READ_SETTINGS
telecom.mdesk.permission.WRITE_SETTINGS
com.lenovo.launcher.permission.READ_SETTINGS
com.lenovo.launcher.permission.WRITE_SETTINGS
com.meizu.flyme.launcher.permission.READ_SETTINGS
com.meizu.flyme.launcher.permission.WRITE_SETTINGS
android.permission.READ_LOGS
com.tencent.tmsecurelite.permission.ACCESS_SERVICE
android.permission.BIND_ACCESSIBILITY_SERVICE
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.android.ContactWidget.permission.READ_SETTINGS
com.android.ContactWidget.permission.WRITE_SETTINGS
android.permission.INTERACT_ACROSS_USERS
android.permission.INTERACT_ACROSS_USERS_FULL
android.permission.MOUNT_UNMOUNT_FILESYSTEMS
com.lenovo.launcher.permission.BADGE_READ
com.lenovo.launcher.permission.BADGE_WRITE
com.huawei.android.launcher.permission.CHANGE_BADGE
android.permission.READ_SYNC_STATS
android.permission.WRITE_SYNC_SETTINGS
android.permission.READ_SYNC_SETTINGS
android.permission.AUTHENTICATE_ACCOUNTS
android.permission.GET_ACCOUNTS

Receivers

com.tencent.mtt.browser.push.service.ConnectivityReceiver

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED
android.net.conn.CONNECTIVITY_CHANGE
android.intent.action.BOOT_COMPLETED
android.intent.action.PACKAGE_REPLACED

com.tencent.mtt.browser.engine.ServiceProcessReceiver

android.net.wifi.STATE_CHANGE
android.net.wifi.WIFI_STATE_CHANGED
com.tencent.mtt.wifi.HEADS_UP
com.tencent.mtt.wifi.FREE_WIFI_NOTI_CLICK
com.tencent.mtt.wifi.FREE_WIFI_NOTI_DEL
com.tencent.mtt.wifi.SETTINGS_CHECK
com.tencent.mtt.wifi.CIRCLE_NEW_MESSAGE

com.tencent.mtt.browser.push.service.PushStatReceiver

com.tencent.mtt.ACTION_NF_CANCELLED
com.tencent.mtt.ACTION_NF_CLICKED
com.tencent.mtt.ACTION_ACTIVATE_PUSH_BY_SDK
android.intent.action.ACTION_SHUTDOWN
android.intent.action.REBOOT

com.tencent.mtt.browser.desktop.FrequentVisitReceiver

com.tencent.qlauncher.action.ACTION_INQUIRY_QQBrowser_SHORTCUT

com.tencent.mtt.widget.androidwidget.QBAppWidgetProviderA

android.appwidget.action.APPWIDGET_UPDATE
com.tencent.mtt.widget.a.update
com.tencent.mtt.widget.active

com.tencent.mtt.browser.push.external.third.MiPushMessageReceiver

com.xiaomi.mipush.RECEIVE_MESSAGE
com.xiaomi.mipush.MESSAGE_ARRIVED
com.xiaomi.mipush.ERROR

com.xiaomi.push.service.receivers.PingReceiver

com.xiaomi.push.PING_TIMER

com.baidu.android.pushservice.RegistrationReceiver

com.baidu.android.pushservice.action.BIND_SYNC

Services

com.tencent.mtt.external.wifi.inhost.WiFiTileService

android.service.quicksettings.action.QS_TILE

com.tencent.mtt.search.view.SearchTileService

android.service.quicksettings.action.QS_TILE

com.tencent.mtt.external.gameplayer.X5GamePlayerBridgeService

com.tencent.tbs.gamesdk.ACTION_GAME_HOST_BRIDGE_SERVICE

com.tencent.mtt.browser.push.service.PushRemoteService

com.tencent.mtt.service.ACTION_DEFAULT
com.tencent.mtt.service.ACTION_HEARTBEAT
com.tencent.mtt.service.ACTION_NETWORKCHG
com.tencent.mtt.service.ACTION_PUSH_ACTIVATED_BY_SDK
com.tencent.mtt.service.ACTION_PUSH_ACTIVATED_BY_DAEMON

com.tencent.mtt.external.market.inhost.QQMarketService

com.tencent.mtt.qqmarket.engine.pushcmd
com.tencent.mtt.qqmarket.updateusage

com.tencent.mtt.sdk.BrowserSdkService

com.tencent.mtt.ACTION_DOWNLOAD
com.tencent.mtt.ACTION_ACTIVE_PUSH
com.tencent.mtt.ACTION_DAEMON_ACTIVE_PUSH
com.tencent.mtt.ACTION_TBS_TIPS
com.tencent.mtt.reader.ACTION_SDK_CLIENT
com.tencent.mtt.ACTION_TBS_CALL
com.tencent.mtt.ACTION_PLUGIN_SERV
com.tencent.mtt.ACTION_WUP

com.tencent.mtt.browser.video.service.H5VideoService

com.tencent.smtt.export.wonderplayer.ACTION_DEFAULT
com.tencent.mtt.video.ACTION_REGIST_SDK_CLIENT
com.tencent.smtt.export.wonderplayer.ACTION_DEFAULT

com.tencent.mtt.browser.accessibility.QBAccessibiltyService

android.accessibilityservice.AccessibilityService

com.tencent.mtt.browser.push.external.account.SyncService

android.content.SyncAdapter

com.tencent.mtt.browser.push.external.account.AccountService

android.accounts.AccountAuthenticator

cn.jpush.android.service.DaemonService

cn.jpush.android.intent.DaemonService

com.igexin.sdk.PushService

com.igexin.sdk.action.service.message

com.tencent.android.tpush.rpc.XGRemoteService

com.tencent.mtt.PUSH_ACTION

Android Permissions

0cbefef8144330ec4baf780d858cacf8_JaffaCakes118

Permissions

com.tencent.mtt.base.stat.permission.READ_STATDB

com.tencent.mtt.base.stat.permission.WRITE_STATDB

com.tencent.mtt.permission.MIPUSH_RECEIVE

android.permission.RESTART_PACKAGES

com.tencent.mtt.broadcast

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_PHONE_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.EXPAND_STATUS_BAR

android.permission.READ_SMS

android.permission.SEND_SMS

android.permission.RECEIVE_SMS

android.permission.CAMERA

android.permission.CALL_PHONE

android.permission.RECORD_AUDIO

android.permission.ACCESS_COARSE_LOCATION

android.permission.ACCESS_FINE_LOCATION

com.android.alarm.permission.SET_ALARM

android.permission.CHANGE_WIFI_STATE

android.permission.CHANGE_NETWORK_STATE

android.permission.GET_TASKS

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.VIBRATE

android.permission.FLASHLIGHT

android.permission.SYSTEM_ALERT_WINDOW

android.permission.SET_WALLPAPER

android.permission.MODIFY_AUDIO_SETTINGS

com.android.launcher.permission.UNINSTALL_SHORTCUT

com.android.launcher.permission.INSTALL_SHORTCUT

android.permission.WRITE_SETTINGS

com.android.launcher.permission.READ_SETTINGS

com.android.launcher.permission.WRITE_SETTINGS

com.google.android.launcher.permission.READ_SETTINGS

com.google.android.launcher.permission.WRITE_SETTINGS

com.htc.launcher.permission.READ_SETTINGS

com.htc.launcher.permission.WRITE_SETTINGS

com.nd.android.launcher.permission.READ_SETTINGS

com.nd.android.launcher.permission.WRITE_SETTINGS

com.lge.launcher.permission.READ_SETTINGS

com.lge.launcher.permission.WRITE_SETTINGS

com.fede.launcher.permission.READ_SETTINGS

com.fede.launcher.permission.WRITE_SETTINGS

org.adw.launcher.permission.READ_SETTINGS

org.adw.launcher.permission.WRITE_SETTINGS

org.adwfreak.launcher.permission.READ_SETTINGS

org.adwfreak.launcher.permission.WRITE_SETTINGS

org.adw.launcher_donut.permission.READ_SETTINGS

Sharing

General

Malware Config

Signatures

Files

com.tencent.mtt

com.tencent.mtt.SplashActivity

Activities

com.tencent.mtt.SplashActivity

com.tencent.mtt.MainActivity

com.tencent.mtt.businesscenter.spedition.bd.BlockActivity

com.tencent.mtt.external.yiya.inhost.YiyaWidgetActivity

com.tencent.mtt.external.yiya.inhost.YiyaAsistantActivity

com.tencent.mtt.search.SearchActivity

com.tencent.mtt.external.qrcode.inhost.CaptureActivity

com.tencent.mtt.browser.video.H5VideoThrdcallActivity

com.tencent.mtt.external.reader.thirdcall.ThirdCallDispatchActivity

com.tencent.mtt.external.reader.thirdcall.ThirdCallFileReaderActivity

.external.reader.thirdcall.ThridCallFilePickerActivity

com.tencent.mtt.external.reader.thirdcall.ThirdCallMusicReaderActivity

com.tencent.mtt.external.reader.thirdcall.ThirdCallImageReaderActivity

com.tencent.mtt.external.reader.thirdcall.ThirdCallZipReaderActivity

com.tencent.mtt.external.gameplayer.X5GamePlayerActivity

com.tencent.mtt.external.gameplayer.X5GamePlayerBridgeActivity

com.tencent.mtt.browser.account.inhost.MultiProcessBridgeActivity

com.tencent.mtt.businesscenter.intent.IntentDispatcherActivity

com.tencent.mtt.browser.share.inhost.FastSpreadEntryActivity

com.tencent.tauth.AuthActivity

com.tencent.mtt.browser.desktop.FrequentVisitActvity

com.tencent.mtt.browser.desktop.baidu.BaiduActivity

com.tencent.mtt.browser.desktop.InsterestDiscoveryActivity

com.tencent.mtt.browser.file.FileManagerActivity

com.tencent.midas.qq.APMidasQQWalletActivity

com.tencent.mtt.external.wifi.inhost.WifiLaunchActivity

Permissions

Receivers

com.tencent.mtt.browser.push.service.ConnectivityReceiver

com.tencent.mtt.browser.engine.ServiceProcessReceiver

com.tencent.mtt.browser.push.service.PushStatReceiver

com.tencent.mtt.browser.desktop.FrequentVisitReceiver

com.tencent.mtt.widget.androidwidget.QBAppWidgetProviderA

com.tencent.mtt.browser.push.external.third.MiPushMessageReceiver

com.xiaomi.push.service.receivers.PingReceiver

com.baidu.android.pushservice.RegistrationReceiver

Services

com.tencent.mtt.external.wifi.inhost.WiFiTileService

com.tencent.mtt.search.view.SearchTileService

com.tencent.mtt.external.gameplayer.X5GamePlayerBridgeService

com.tencent.mtt.browser.push.service.PushRemoteService

com.tencent.mtt.external.market.inhost.QQMarketService

com.tencent.mtt.sdk.BrowserSdkService

com.tencent.mtt.browser.video.service.H5VideoService

com.tencent.mtt.browser.accessibility.QBAccessibiltyService

com.tencent.mtt.browser.push.external.account.SyncService

com.tencent.mtt.browser.push.external.account.AccountService

cn.jpush.android.service.DaemonService

com.igexin.sdk.PushService

com.tencent.android.tpush.rpc.XGRemoteService

Android Permissions

0cbefef8144330ec4baf780d858cacf8_JaffaCakes118