SpotifyObscure98[.]apk

General

Target

SpotifyObscure98.apk
Size

37.8MB
MD5

59c1e69ea600cf17d7c6aa3f1f240307
SHA1

6acaea4c8c9f9cbbc63bcfb907b0d2f74f32a7bb
SHA256

4c9d2c90a634dc2a3c90bd5e2eba5c03203ad8fe50892c3ae213459818b22f07
SHA512

3e180722176c389a08c79b6be76c581c905c1f25fbd87f5c855fe3c84a5c54ef357cfb1be20c106680780b4f8ecd724a989fe09e4e0658153e344119d6358ea2
SSDEEP

786432:w1ddpfTu0TS+mIT0cSSwShtOCSSCRn6Z0X9Fe0+25+hoqvHxn:wXvfIsAcSrSi6Z8e0+2GoEHd

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 4 IoCs

description	ioc
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

Files

SpotifyObscure98.apk
.apk android arch:arm

com.spotify.music

com.spotify.music.MainActivity

Activities

com.spotify.music.MainActivity

android.intent.action.MAIN
android.intent.action.MAIN
android.intent.action.MUSIC_PLAYER
android.nfc.action.NDEF_DISCOVERED
android.intent.action.SEARCH
android.intent.action.VIEW
com.facebook.application.174829003346
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SEARCH
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.intent.action.APPLICATION_PREFERENCES
com.sonymobile.media.dashboard.ACTION_VIEW_MUSIC_TILE

com.spotify.mobile.android.service.LoginActivity

com.spotify.mobile.android.service.action.session.LOGIN

com.spotify.mobile.android.ui.activity.TosTextActivity

android.intent.action.VIEW

com.spotify.mobile.android.arsenal.ArsenalSSOBrowserActivity

com.spotify.music.NPAM_ACTION_BROWSER

com.sony.snei.np.android.account.oauth.BrowserRedirectReceiverActivity

android.intent.action.VIEW

com.spotify.mobile.android.sso.AuthorizationActivity

com.spotify.sso.action.START_AUTH_FLOW

com.spotify.mobile.android.spotlets.share.messenger.MessengerShareActivity

android.intent.action.PICK

com.spotify.mobile.android.spotlets.myspin.MySpinBootstrapActivity

com.bosch.myspin.action.MAIN

com.spotify.music.spotlets.magiclink.MagicLinkActivity

android.intent.action.VIEW

com.spotify.music.features.friendsactivity.friendslist.ui.AvatarListContainerActivity

android.intent.action.MAIN

com.spotify.music.features.friendsactivity.storydetails.ui.StoryDetailActivity

android.intent.action.MAIN

Permissions

android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BROADCAST_STICKY
android.permission.GET_ACCOUNTS
android.permission.INTERNET
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.NFC
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_EXTERNAL_STORAGE
com.android.vending.BILLING
android.permission.CHANGE_WIFI_MULTICAST_STATE
com.google.android.c2dm.permission.RECEIVE
android.permission.RECEIVE_BOOT_COMPLETED
com.spotify.music.permission.C2D_MESSAGE
com.spotify.music.permission.INTERNAL_BROADCAST
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
com.spotify.music.permission.SECURED_BROADCAST
android.permission.USE_CREDENTIALS
android.permission.MANAGE_ACCOUNTS
com.sony.snei.np.android.account.provider.permission.DUID_READ_PROVIDER
com.android.launcher.permission.INSTALL_SHORTCUT

Receivers

com.spotify.music.internal.receiver.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.spotify.music.spotlets.tracker.iterable.IterablePushReceiver

com.iterable.push.ACTION_PUSH_REGISTRATION
com.google.android.c2dm.intent.RECEIVE

com.iterable.iterableapi.IterablePushOpenReceiver

com.iterable.push.NOTIF_OPENED

com.spotify.mobile.android.spotlets.bmw.registration.BmwConnectedReceiver

com.spotify.mobile.android.spotlets.bmw.ACTION_CONNECTED

com.spotify.mobile.android.spotlets.bmw.registration.DisconnectedReceiver

com.spotify.mobile.android.spotlets.bmw.ACTION_DISCONNECTED

com.spotify.mobile.android.spotlets.bmw.registration.BmwConnectInstallReceiver

com.bmwgroup.connected.car.app.action.CONNECTED_APP_INSTALLED

com.spotify.music.spotlets.widget.SpotifyWidget

android.appwidget.action.APPWIDGET_UPDATE
com.spotify.mobile.android.ui.widget.PREVIOUS
com.spotify.mobile.android.ui.widget.PLAY
com.spotify.mobile.android.ui.widget.NEXT
com.spotify.mobile.android.ui.widget.BROKER

com.spotify.music.spotlets.gcm.GcmBroadcastReceiver

com.google.android.c2dm.intent.RECEIVE

com.spotify.mobile.android.service.bluetooth.BluetoothBroadcastReceiver

android.bluetooth.adapter.action.STATE_CHANGED
android.bluetooth.device.action.ACL_CONNECTED
android.bluetooth.device.action.ACL_DISCONNECTED
com.spotify.music.service.bluetooth.action.START_APP_PROTOCOL_SERVER

com.spotify.music.spotlets.freetiernotification.receiver.FreeTierNotificationReceiver

android.intent.action.BOOT_COMPLETED
com.spotify.music.spotlets.freetiernotification.COMPLETE_TASTE_ONBOARDING
com.spotify.music.spotlets.freetiernotification.SEARCH
com.spotify.music.spotlets.freetiernotification.UPDATE_TASTE_ONBOARDING
com.spotify.music.spotlets.freetiernotification.DOWNSELLING
com.spotify.music.spotlets.freetiernotification.LAST_PLAYED
com.spotify.music.spotlets.freetiernotification.YOUR_PLAYLISTS
com.spotify.music.spotlets.freetiernotification.CREATE_PLAYLIST
com.spotify.music.spotlets.freetiernotification.HIGHLIGHT_HOME
com.spotify.music.spotlets.freetiernotification.UPDATED_HOME
com.spotify.music.spotlets.freetiernotification.ADD_TRACKS
com.spotify.music.spotlets.freetiernotification.DISCOVER_WEEKLY_PRESENTATION
com.spotify.music.spotlets.freetiernotification.DISCOVER_WEEKLY_REMINDER
com.spotify.music.spotlets.freetiernotification.RELEASE_RADAR_PRESENTATION
com.spotify.music.spotlets.freetiernotification.RELEASE_RADAR_REMINDER

Services

com.spotify.mobile.android.service.SpotifyService

com.spotify.mobile.service.action.COSMOS_PROXY

com.spotify.mobile.android.spotlets.androidauto.SpotifyMediaBrowserService

android.media.browse.MediaBrowserService

com.spotify.mobile.android.wear.WearableCommunicationService

com.google.android.gms.wearable.BIND_LISTENER

com.spotify.mobile.android.spotlets.appprotocol.service.AppProtocolRemoteService

com.spotify.mobile.appprotocol.action.START_APP_PROTOCOL_SERVICE

com.spotify.mobile.android.service.OfflineModeTileService

android.service.quicksettings.action.QS_TILE

Android Permissions

SpotifyObscure98.apk

Permissions

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.GET_ACCOUNTS

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

com.android.vending.BILLING

android.permission.CHANGE_WIFI_MULTICAST_STATE

com.google.android.c2dm.permission.RECEIVE

android.permission.RECEIVE_BOOT_COMPLETED

com.spotify.music.permission.C2D_MESSAGE

com.spotify.music.permission.INTERNAL_BROADCAST

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

com.spotify.music.permission.SECURED_BROADCAST

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

com.sony.snei.np.android.account.provider.permission.DUID_READ_PROVIDER

com.android.launcher.permission.INSTALL_SHORTCUT

Sharing

General

Malware Config

Signatures

Files

com.spotify.music

com.spotify.music.MainActivity

Activities

com.spotify.music.MainActivity

com.spotify.mobile.android.service.LoginActivity

com.spotify.mobile.android.ui.activity.TosTextActivity

com.spotify.mobile.android.arsenal.ArsenalSSOBrowserActivity

com.sony.snei.np.android.account.oauth.BrowserRedirectReceiverActivity

com.spotify.mobile.android.sso.AuthorizationActivity

com.spotify.mobile.android.spotlets.share.messenger.MessengerShareActivity

com.spotify.mobile.android.spotlets.myspin.MySpinBootstrapActivity

com.spotify.music.spotlets.magiclink.MagicLinkActivity

com.spotify.music.features.friendsactivity.friendslist.ui.AvatarListContainerActivity

com.spotify.music.features.friendsactivity.storydetails.ui.StoryDetailActivity

Permissions

Receivers

com.spotify.music.internal.receiver.MediaButtonReceiver

com.spotify.music.spotlets.tracker.iterable.IterablePushReceiver

com.iterable.iterableapi.IterablePushOpenReceiver

com.spotify.mobile.android.spotlets.bmw.registration.BmwConnectedReceiver

com.spotify.mobile.android.spotlets.bmw.registration.DisconnectedReceiver

com.spotify.mobile.android.spotlets.bmw.registration.BmwConnectInstallReceiver

com.spotify.music.spotlets.widget.SpotifyWidget

com.spotify.music.spotlets.gcm.GcmBroadcastReceiver

com.spotify.mobile.android.service.bluetooth.BluetoothBroadcastReceiver

com.spotify.music.spotlets.freetiernotification.receiver.FreeTierNotificationReceiver

Services

com.spotify.mobile.android.service.SpotifyService

com.spotify.mobile.android.spotlets.androidauto.SpotifyMediaBrowserService

com.spotify.mobile.android.wear.WearableCommunicationService

com.spotify.mobile.android.spotlets.appprotocol.service.AppProtocolRemoteService

com.spotify.mobile.android.service.OfflineModeTileService

Android Permissions

SpotifyObscure98.apk