yandex[.]music-2021[.]12[.]5-4444-arm7[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
yandex.music-2021.12.5-4444-arm7.apk
Size 15.5MB
Sample221220-ps9v7acf4v
SHA256 e728b0820bc0f5085269d20a8dfa2556ab1db7d349134a6677fa84dbb5aa58c3
MD5 2f26fa9da26cac7b10b7921aad030b9e
SHA1 f384ae725a632de7ed426ae0a600440df41ebac4
SHA512 a83c6de0c911c049a7d07df1fd4baeaae5af112a82f91a8c2abc364eda93a059cbdb15bf1f616cae80467869435c62a4d6b5db928b5a900f55cea2363c914f5c
SSDEEP 393216:3nUhroWYnE9BT4fkFm/vzqYU17OWGLTUYM:3croW4+BTwOYinGEV
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

File Explorer

yandex.music-2021.12.5-4444-arm7.apk

.apk 15.5MB

yandex.music-2021.12.5-4444-arm7.apk

SHA256 e728b0820bc0f5085269d20a8dfa2556ab1db7d349134a6677fa84dbb5aa58c3
MD5 2f26fa9da26cac7b10b7921aad030b9e
SHA1 f384ae725a632de7ed426ae0a600440df41ebac4
SHA512 a83c6de0c911c049a7d07df1fd4baeaae5af112a82f91a8c2abc364eda93a059cbdb15bf1f616cae80467869435c62a4d6b5db928b5a900f55cea2363c914f5c
SSDEEP 393216:3nUhroWYnE9BT4fkFm/vzqYU17OWGLTUYM:3croW4+BTwOYinGEV
MD5 SHA1 SHA512 SSDEEP

android arch:arm

ru.yandex.music

ru.yandex.music.proxy.ProxySettingsActivity

ru.yandex.music.wizard.WizardActivity

ru.yandex.music.main.MainScreenActivity

ru.yandex.music.settings.SettingsActivity

ru.yandex.music.support.AppFeedbackActivity

ru.yandex.music.profile.ProfileActivity

ru.yandex.music.phonoteka.mymusic.PhonotekaItemActivity

ru.yandex.music.search.SearchActivity

ru.yandex.music.search.result.SearchResultDetailsActivity

ru.yandex.music.auth.onboarding.WelcomeActivity

ru.yandex.music.url.ui.UrlActivity

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW com.google.android.gms.actions.SEARCH_ACTION android.media.action.MEDIA_PLAY_FROM_SEARCH

ru.yandex.music.main.TransparentDialogActivity

ru.yandex.music.profile.PromoCodeActivity

ru.yandex.music.operator.bind.PhoneSelectionActivity

ru.yandex.music.profile.management.CancelSubscriptionActivity

ru.yandex.music.payment.paywall.PaywallActivity

ru.yandex.music.payment.pay.card.CardPaymentActivity

ru.yandex.music.payment.pay.samsung.SamsungPaymentActivity

ru.yandex.music.payment.pay.Confirm3dsActivity

ru.yandex.music.payment.pay.CreateCardActivity

ru.yandex.music.payment.pay.PaymentMethodsListActivity

ru.yandex.music.payment.paywall.plus.YandexPlusBenefitsActivity

ru.yandex.music.payment.pay.PaymentActivity

ru.yandex.music.payment.paywall2.PurchaseApplicationActivity

ru.yandex.music.payment.divpaywall.DivPaywallActivity

ru.yandex.music.player.DefaultLocalActivity

android.intent.action.VIEW

ru.yandex.music.auth.login.LoginActivity

ru.yandex.music.auth.ReloginActivity

ru.yandex.music.catalog.album.AlbumActivity

ru.yandex.music.catalog.album.screen.AlbumScreenActivity

ru.yandex.music.catalog.artist.screen.ArtistScreenActivity

ru.yandex.music.catalog.nonmusic.NonMusicScreenActivity

ru.yandex.music.profile.RestorePurchasesActivity

ru.yandex.music.url.ui.StubActivity

ru.yandex.music.settings.AboutActivity

ru.yandex.music.mixes.TagActivity

ru.yandex.music.settings.UsedMemoryActivity

ru.yandex.music.catalog.artist.ArtistActivity

ru.yandex.music.catalog.artist.ArtistItemsActivity

ru.yandex.music.catalog.playlist.PlaylistActivity

ru.yandex.music.catalog.info.FullInfoActivity

ru.yandex.music.catalog.artist.ArtistFullInfoActivity

ru.yandex.music.imports.ui.ImportsActivity

ru.yandex.music.post.ui.EventTracksPreviewActivity

ru.yandex.music.post.ui.grid.PostGridItemsActivity

ru.yandex.music.landing.autoplaylists.AutoPlaylistGagActivity

ru.yandex.music.bullfinch.BullfinchActivity

ru.yandex.music.common.activity.ExternalDomainActivity

ru.yandex.music.concert.ConcertActivity

ru.yandex.music.catalog.playlist.contest.screen.PlaylistContestActivity

ru.yandex.music.catalog.playlist.contest.ContestPlaylistsActivity

ru.yandex.music.concert.ticket.PurchaseTicketActivity

ru.yandex.music.debug.DebugSettingsActivity

ru.yandex.music.debug.logs.InspectLogsActivity

ru.yandex.music.debug.config.DebugConfigActivity

ru.yandex.music.debug.promos.PromosStateOverrideDebugActivity

ru.yandex.music.catalog.playlist.contest.PlaylistContestInfoActivity

ru.yandex.music.novelties.releases.NewReleasesActivity

ru.yandex.music.novelties.playlists.NewPlaylistsActivity

ru.yandex.music.novelties.podcasts.PodcastsActivity

ru.yandex.music.novelties.podcasts.catalog.PodcastsCatalogActivity

ru.yandex.music.kids.KidsCatalogActivity

ru.yandex.music.chart.catalog.ChartActivity

ru.yandex.music.catalog.playlist.contest.PlaylistContestPopupWinActivity

ru.yandex.music.radio.ui.catalog.RadioCatalogActivity

ru.yandex.music.chart.ChartActivity

ru.yandex.music.phonoteka.playlist.MixesActivity

ru.yandex.music.metatag.MetaTagActivity

ru.yandex.music.metatag.playlist.MetaTagPlaylistsActivity

ru.yandex.music.metatag.album.MetaTagAlbumsActivity

ru.yandex.music.metatag.artist.MetaTagArtistsActivity

ru.yandex.music.common.dialog.congrats.CongratulationsActivity

ru.yandex.music.fullscreen.FullScreenActivity

ru.yandex.music.phonoteka.playlist.editing.EditPlaylistTracksActivity

ru.yandex.music.radio.settings.RadioSettingsActivity

ru.yandex.music.video.VideoActivity

ru.yandex.music.gdpr.GdprWelcomeActivity

ru.yandex.music.share.ShareToActivity

ru.yandex.music.share.preview.SharePreviewActivity

ru.yandex.speechkit.gui.RecognizerActivity

ru.yandex.music.support.NonInteractiveFeedbackActivity

ru.yandex.music.share.CopyExtraTextActivity

ru.yandex.music.yandexplus.house.dialog.PlusHouseActivity

ru.yandex.music.yearstats.YearStatsActivity

ru.yandex.music.cast.ui.WebViewActivity

com.yandex.strannik.internal.ui.router.RouterActivity

com.yandex.intent.ADD_ACCOUNT com.yandex.strannik.ACTION_SYSTEM_ADD_ACCOUNT

com.yandex.strannik.internal.ui.domik.selector.AccountSelectorActivity

com.yandex.strannik.internal.ui.domik.DomikActivity

com.yandex.strannik.internal.ui.webview.WebViewActivity

com.yandex.strannik.internal.ui.browser.SocialBrowserActivity

com.yandex.strannik.internal.ui.browser.SocialBrowserDataActivity

android.intent.action.VIEW

com.yandex.strannik.internal.ui.authsdk.AuthSdkActivity

com.yandex.auth.action.YA_SDK_LOGIN

com.yandex.strannik.internal.ui.AutoLoginActivity

com.yandex.strannik.internal.ui.autologin.AutoLoginRetryActivity

com.yandex.strannik.internal.ui.social.MailPasswordLoginActivity

com.yandex.strannik.internal.ui.social.gimap.MailGIMAPActivity

com.yandex.strannik.internal.ui.SocialApplicationBindActivity

com.yandex.auth.action.BIND_SOCIAL_APPLICATION

com.yandex.strannik.internal.ui.SocialBindActivity

com.yandex.intent.BIND_SOCIAL_ACCOUNT

com.yandex.strannik.internal.social.VkNativeSocialAuthActivity

com.yandex.strannik.action.NATIVE_SOCIAL_VKONTAKTE_AUTH

com.yandex.strannik.internal.social.GoogleNativeSocialAuthActivity

com.yandex.strannik.action.NATIVE_SOCIAL_GOOGLE_AUTH com.yandex.strannik.action.NATIVE_MAILISH_GOOGLE_AUTH

com.yandex.strannik.internal.ui.suspicious.SuspiciousEnterActivity

com.yandex.strannik.internal.ui.AccountNotAuthorizedActivity

com.yandex.strannik.internal.ui.authwithtrack.SendAuthToTrackActivity

com.yandex.strannik.action.SEND_AUTH_TO_TRACK

com.yandex.strannik.internal.ui.authbytrack.AuthByTrackActivity

com.yandex.strannik.internal.ui.tv.AuthInWebViewActivity

com.yandex.strannik.internal.ui.YxAuthActivity

android.intent.action.VIEW

com.yandex.strannik.internal.ui.base.BottomSheetActivity

com.yandex.strannik.internal.social.FbNativeSocialAuthActivity

com.yandex.strannik.action.NATIVE_SOCIAL_FACEBOOK_AUTH

com.facebook.FacebookActivity

com.yandex.music.payment.model.google.GooglePayActivity

com.yandex.music.payment.model.webwidget.PaymentWidgetActivity

com.yandex.music.payment.model.webwidget.WebViewActivity

androidx.compose.ui.tooling.PreviewActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.google.android.gms.common.api.GoogleApiActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW

com.android.billingclient.api.ProxyBillingActivity

ru.yandex.music.common.media.mediabrowser.MusicBrowserService

android.media.browse.MediaBrowserService yandex.auto.media.action.YANDEXRADIO yandex.auto.media.action.MUSIC yandex.auto.media.action.MEDIA_PLAY_FROM_URI

ru.yandex.music.common.service.player.MediaSessionService

ru.yandex.music.action.PLAY ru.yandex.music.action.PAUSE ru.yandex.music.action.SKIP ru.yandex.music.action.REWIND ru.yandex.music.action.STOP android.intent.action.MEDIA_BUTTON

ru.yandex.music.common.service.cache.CacheService

ru.yandex.music.common.service.sync.SyncService

ru.yandex.music.services.RoutineService

ru.yandex.music.statistics.playaudio.PlayAudioService

ru.yandex.music.statistics.contexts.PlayHistoryService

ru.yandex.music.data.user.AddSocialProfileService

ru.yandex.music.api.account.events.AccountEventsSenderService

ru.yandex.music.services.UpdateUserService

ru.yandex.music.common.service.AsyncImportService

ru.yandex.music.push.LocalPushService

ru.yandex.music.shortcuts.ShortcutsHelper

ru.yandex.music.common.service.player.WidgetPlaybackLauncher

ru.yandex.music.cover.upload.UploadCoverService

ru.yandex.music.emergency.EmergencyService

com.yandex.music.core.job.JobService

com.yandex.strannik.internal.core.auth.AuthenticationService

android.accounts.AccountAuthenticator com.yandex.accounts.AccountAuthenticator

com.yandex.strannik.internal.core.sync.SyncService

android.content.SyncAdapter

com.yandex.strannik.internal.push.PassportGcmRegistrationService

com.yandex.strannik.internal.experiments.FetchExperimentsService

com.yandex.metrica.MetricaService

com.yandex.metrica.IMetricaService

com.yandex.metrica.ConfigurationService

com.yandex.metrica.configuration.ACTION_INIT

com.yandex.metrica.ConfigurationJobService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.gms.cast.framework.media.MediaNotificationService

com.google.android.gms.cast.framework.ReconnectionService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

ru.yandex.music.utils.LoginAccountsChangedReceiver

com.yandex.strannik.client.ACCOUNT_REMOVED

ru.yandex.music.ui.widget.WidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

ru.yandex.music.common.service.player.DebugMediaButtonReceiver

android.intent.action.MEDIA_BUTTON

ru.yandex.music.push.PushReportingDelegateReceiver

ru.yandex.music.push.LocalPushReceiver

ru.yandex.music.novelties.push.KidsPushReceiver

ru.yandex.music.push.SilentPushReceiver

ru.yandex.music.action.ymp.SILENT_PUSH_RECEIVE

ru.yandex.music.widget.WidgetClickListener

com.yandex.strannik.internal.core.announcing.AccountsChangedReceiver

android.accounts.LOGIN_ACCOUNTS_CHANGED com.yandex.accounts.LOGIN_ACCOUNTS_CHANGED

com.yandex.strannik.internal.core.announcing.PackageRemovedReceiver

android.intent.action.PACKAGE_FULLY_REMOVED

com.yandex.strannik.internal.smsretriever.SmsRetrieverReceiver

com.google.android.gms.auth.api.phone.SMS_RETRIEVED

com.yandex.strannik.internal.sso.announcing.SsoAnnouncingReceiver

com.yandex.strannik.ACTION_SSO_ANNOUNCEMENT

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.google.android.gms.cast.framework.media.MediaIntentReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

Android Permissions

yandex.music-2021.12.5-4444-arm7.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECORD_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

com.android.vending.BILLING

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.BLUETOOTH

yandex.auto.permission.AUTH

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

com.yandex.permission.READ_CREDENTIALS_STR

com.yandex.permission.AM_COMMUNICATION_STR

android.permission.CHANGE_WIFI_MULTICAST_STATE

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE