Spo[.]apk | Triage

General

Target

Spo.apk
Size

37.6MB
MD5

47d9c69bcaba632ebe1d92f7c1b33a48
SHA1

6b3a06e5326fe5ca0d79776ac858fa72aceb4e75
SHA256

0e32fff2659a5f1785e02c9b80a926632ae0b2f59a1334c69142cdb52e56e16c
SHA512

9803bcb7e425ef1b4cfdb5c1e2bf94186ca26e67e2c541fc6d5fa56251ddc4c10feec1894bdd59edcfef95c11f60522de4ec353efc65dd12d46381db9958cc84
SSDEEP

786432:ntSuMzmOcQvGPcjgN2iCxqT5Owuk+T+HPa9WfIRidDoPDqvHkc:tSfzVvGxVkY4v+HRfIRidgDEHf

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

Spo.apk
.apk android arch:arm

com.spotify.music

com.spotify.music.MainActivity

Activities

com.spotify.music.MainActivity

android.intent.action.MAIN
android.intent.action.MAIN
android.intent.action.MUSIC_PLAYER
android.nfc.action.NDEF_DISCOVERED
android.intent.action.SEARCH
android.intent.action.VIEW
com.facebook.application.174829003346
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SEARCH
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.intent.action.APPLICATION_PREFERENCES
com.sonymobile.media.dashboard.ACTION_VIEW_MUSIC_TILE

com.spotify.mobile.android.service.LoginActivity

com.spotify.mobile.android.service.action.session.LOGIN

com.spotify.mobile.android.ui.activity.TosTextActivity

android.intent.action.VIEW

com.spotify.mobile.android.arsenal.ArsenalSSOBrowserActivity

com.spotify.music.NPAM_ACTION_BROWSER

com.sony.snei.np.android.account.oauth.BrowserRedirectReceiverActivity

android.intent.action.VIEW

com.spotify.mobile.android.sso.AuthorizationActivity

com.spotify.sso.action.START_AUTH_FLOW

com.spotify.mobile.android.spotlets.share.messenger.MessengerShareActivity

android.intent.action.PICK

com.spotify.mobile.android.spotlets.myspin.MySpinBootstrapActivity

com.bosch.myspin.action.MAIN

com.spotify.music.spotlets.magiclink.MagicLinkActivity

android.intent.action.VIEW

com.spotify.music.features.friendsactivity.friendslist.ui.AvatarListContainerActivity

android.intent.action.MAIN

com.spotify.music.features.friendsactivity.storydetails.ui.StoryDetailActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BROADCAST_STICKY
android.permission.GET_ACCOUNTS
android.permission.INTERNET
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.NFC
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
com.android.vending.BILLING
android.permission.CHANGE_WIFI_MULTICAST_STATE
com.google.android.c2dm.permission.RECEIVE
android.permission.RECEIVE_BOOT_COMPLETED
com.spotify.music.permission.C2D_MESSAGE
com.spotify.music.permission.INTERNAL_BROADCAST
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
com.spotify.music.permission.SECURED_BROADCAST
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
com.sony.snei.np.android.account.provider.permission.DUID_READ_PROVIDER
com.android.launcher.permission.INSTALL_SHORTCUT

Receivers

com.spotify.music.internal.receiver.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.spotify.music.spotlets.tracker.iterable.IterablePushReceiver

com.iterable.push.ACTION_PUSH_REGISTRATION
com.google.android.c2dm.intent.RECEIVE

com.iterable.iterableapi.IterablePushOpenReceiver

com.iterable.push.NOTIF_OPENED

com.spotify.mobile.android.spotlets.bmw.registration.BmwConnectedReceiver

com.spotify.mobile.android.spotlets.bmw.ACTION_CONNECTED

com.spotify.mobile.android.spotlets.bmw.registration.DisconnectedReceiver

com.spotify.mobile.android.spotlets.bmw.ACTION_DISCONNECTED

com.spotify.mobile.android.spotlets.bmw.registration.BmwConnectInstallReceiver

com.bmwgroup.connected.car.app.action.CONNECTED_APP_INSTALLED

com.spotify.music.spotlets.widget.SpotifyWidget

android.appwidget.action.APPWIDGET_UPDATE
com.spotify.mobile.android.ui.widget.PREVIOUS
com.spotify.mobile.android.ui.widget.PLAY
com.spotify.mobile.android.ui.widget.NEXT
com.spotify.mobile.android.ui.widget.BROKER

com.spotify.music.spotlets.gcm.GcmBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE

com.spotify.mobile.android.service.bluetooth.BluetoothBroadcastReceiver

android.bluetooth.adapter.action.STATE_CHANGED
android.bluetooth.device.action.ACL_CONNECTED
android.bluetooth.device.action.ACL_DISCONNECTED
com.spotify.music.service.bluetooth.action.START_APP_PROTOCOL_SERVER

com.spotify.music.spotlets.freetiernotification.receiver.FreeTierNotificationReceiver

android.intent.action.BOOT_COMPLETED
com.spotify.music.spotlets.freetiernotification.COMPLETE_TASTE_ONBOARDING
com.spotify.music.spotlets.freetiernotification.SEARCH
com.spotify.music.spotlets.freetiernotification.UPDATE_TASTE_ONBOARDING
com.spotify.music.spotlets.freetiernotification.DOWNSELLING
com.spotify.music.spotlets.freetiernotification.LAST_PLAYED
com.spotify.music.spotlets.freetiernotification.YOUR_PLAYLISTS
com.spotify.music.spotlets.freetiernotification.CREATE_PLAYLIST
com.spotify.music.spotlets.freetiernotification.HIGHLIGHT_HOME
com.spotify.music.spotlets.freetiernotification.UPDATED_HOME
com.spotify.music.spotlets.freetiernotification.ADD_TRACKS
com.spotify.music.spotlets.freetiernotification.DISCOVER_WEEKLY_PRESENTATION
com.spotify.music.spotlets.freetiernotification.DISCOVER_WEEKLY_REMINDER
com.spotify.music.spotlets.freetiernotification.RELEASE_RADAR_PRESENTATION
com.spotify.music.spotlets.freetiernotification.RELEASE_RADAR_REMINDER

Services

com.spotify.mobile.android.service.SpotifyService

com.spotify.mobile.service.action.COSMOS_PROXY

com.spotify.mobile.android.spotlets.androidauto.SpotifyMediaBrowserService

android.media.browse.MediaBrowserService

com.spotify.mobile.android.wear.WearableCommunicationService

com.google.android.gms.wearable.BIND_LISTENER

com.spotify.mobile.android.spotlets.appprotocol.service.AppProtocolRemoteService

com.spotify.mobile.appprotocol.action.START_APP_PROTOCOL_SERVICE

com.spotify.mobile.android.service.OfflineModeTileService

android.service.quicksettings.action.QS_TILE

Android Permissions

Spo.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.GET_ACCOUNTS

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

com.android.vending.BILLING

android.permission.CHANGE_WIFI_MULTICAST_STATE

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED

com.spotify.music.permission.C2D_MESSAGE

com.spotify.music.permission.INTERNAL_BROADCAST

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.spotify.music.permission.SECURED_BROADCAST

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

com.sony.snei.np.android.account.provider.permission.DUID_READ_PROVIDER

com.android.launcher.permission.INSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

com.spotify.music

com.spotify.music.MainActivity

Activities

com.spotify.music.MainActivity

com.spotify.mobile.android.service.LoginActivity

com.spotify.mobile.android.ui.activity.TosTextActivity

com.spotify.mobile.android.arsenal.ArsenalSSOBrowserActivity

com.sony.snei.np.android.account.oauth.BrowserRedirectReceiverActivity

com.spotify.mobile.android.sso.AuthorizationActivity

com.spotify.mobile.android.spotlets.share.messenger.MessengerShareActivity

com.spotify.mobile.android.spotlets.myspin.MySpinBootstrapActivity

com.spotify.music.spotlets.magiclink.MagicLinkActivity

com.spotify.music.features.friendsactivity.friendslist.ui.AvatarListContainerActivity

com.spotify.music.features.friendsactivity.storydetails.ui.StoryDetailActivity

Permissions

Receivers

com.spotify.music.internal.receiver.MediaButtonReceiver

com.spotify.music.spotlets.tracker.iterable.IterablePushReceiver

com.iterable.iterableapi.IterablePushOpenReceiver

com.spotify.mobile.android.spotlets.bmw.registration.BmwConnectedReceiver

com.spotify.mobile.android.spotlets.bmw.registration.DisconnectedReceiver

com.spotify.mobile.android.spotlets.bmw.registration.BmwConnectInstallReceiver

com.spotify.music.spotlets.widget.SpotifyWidget

com.spotify.music.spotlets.gcm.GcmBroadcastReceiver

com.spotify.mobile.android.service.bluetooth.BluetoothBroadcastReceiver

com.spotify.music.spotlets.freetiernotification.receiver.FreeTierNotificationReceiver

Services

com.spotify.mobile.android.service.SpotifyService

com.spotify.mobile.android.spotlets.androidauto.SpotifyMediaBrowserService

com.spotify.mobile.android.wear.WearableCommunicationService

com.spotify.mobile.android.spotlets.appprotocol.service.AppProtocolRemoteService

com.spotify.mobile.android.service.OfflineModeTileService

Android Permissions

Spo.apk