Spotify[.]apk | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

Spotify.apk
Size

57.6MB
MD5

1b6afff2fb3d5765ba13f5d821675d70
SHA1

0b90e8c929419fc2cb3f34cd1eeeae8771d87af8
SHA256

9ee75a787e241c5a17cce664c5a6f6c98f3a56e9f0266587ffb9811b93a24056
SHA512

9399a4419955a71f933b172df4162f759dce593fba1ba6961453ffe9d32823cd1b1d9e08c6ace6ba1e5811b083af03d04dfb77417cd74d5445343f5b472facfc
SSDEEP

1572864:vbo6J/os0gHLG2HAjnIbtGn9iYaZgm9jSFn1H:vE6ntHA7itGn9iY8gc0n1H

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 10 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to advertise to nearby Bluetooth devices	android.permission.BLUETOOTH_ADVERTISE

Files

Spotify.apk
.apk android arch:arm64

com.spotify.music

com.spotify.music.MainActivity

Activities

com.spotify.music.MainActivity

android.intent.action.MAIN
android.intent.action.MAIN
android.intent.action.MUSIC_PLAYER
android.nfc.action.NDEF_DISCOVERED
android.intent.action.SEARCH
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SEARCH
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.intent.action.APPLICATION_PREFERENCES
com.sonymobile.media.dashboard.ACTION_VIEW_MUSIC_TILE
android.intent.action.VIEW
android.intent.action.VIEW

com.spotify.partneraccountlinking.partneraccountlinking.PartnerAccountLinkingActivity

android.intent.action.VIEW

com.spotify.login.loginflowimpl.LoginActivity

com.spotify.mobile.android.service.action.session.LOGIN

com.spotify.appauthorization.sso.AuthorizationActivity

com.spotify.sso.action.START_AUTH_FLOW
com.spotify.sso.action.START_GOOGLE_AUTH_FLOW_V1
android.intent.action.VIEW

com.spotify.allboarding.allboardingimpl.AllboardingActivity

spotify.intent.action.ALLBOARDING

com.spotify.gpb.formofpaymentgpb.checkoutpage.GoogleCheckoutActivity

spotify.intent.action.GPB_CHECKOUT

com.spotify.appauthorization.externallogin.LoginRedirectActivity

com.spotify.music.ACTION_EXTERNAL_LOGIN

com.facebook.CustomTabActivity

android.intent.action.VIEW

Permissions

android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BROADCAST_STICKY
android.permission.INTERNET
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.NFC
android.permission.FOREGROUND_SERVICE
android.permission.READ_PHONE_STATE
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_IMAGES
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.POST_NOTIFICATIONS
com.spotify.music.permission.C2D_MESSAGE
com.spotify.music.permission.INTERNAL_BROADCAST
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.BLUETOOTH_CONNECT
android.permission.BLUETOOTH_SCAN
com.spotify.music.permission.SECURED_BROADCAST
android.permission.USE_CREDENTIALS
android.permission.GET_ACCOUNTS
com.sony.snei.np.android.account.provider.permission.DUID_READ_PROVIDER
com.android.launcher.permission.INSTALL_SHORTCUT
com.samsung.WATCH_APP_TYPE.Companion
com.google.android.gms.permission.AD_ID
com.sec.android.app.clockpackage.permission.READ_ALARM
com.samsung.android.rubin.context.permission.READ_CONTEXT_MANAGER
android.permission.BLUETOOTH_ADVERTISE
com.google.android.apps.meetings.permission.MEET_LIVE_SHARING
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.spotify.music.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.samsung.android.samsungaccount.permission.ACCOUNT_MANAGER
com.android.vending.BILLING

Receivers

com.spotify.interapp.service.service.BluetoothAclReceiver

android.bluetooth.device.action.ACL_CONNECTED
android.bluetooth.device.action.ACL_DISCONNECTED

com.spotify.interapp.service.service.InterAppStartServerReceiver

com.spotify.music.service.bluetooth.action.START_APP_PROTOCOL_SERVER

com.spotify.accessory.statemanagerimpl.bluetooth.connectionstate.BluetoothConnectionStateReceiver

android.bluetooth.a2dp.profile.action.CONNECTION_STATE_CHANGED

com.spotify.carmobile.wazesdk.navigation.WazeWakeUpReceiver

com.waze.sdk.audio.ACTION_INIT

com.spotify.widget.widget.SpotifyWidget

android.appwidget.action.APPWIDGET_UPDATE
com.spotify.mobile.android.ui.widget.PREVIOUS
com.spotify.mobile.android.ui.widget.PLAY
com.spotify.mobile.android.ui.widget.NEXT

com.spotify.mediasession.mediasession.receiver.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.spotify.music.alarmlauncher.SpotifyAlarmLauncherReceiver

com.spotify.music.ACTION_PREPARE

com.spotify.proactiveplatforms.recommendationswidget.RecommendationsWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
com.spotify.proactiveplatforms.recommendationswidget.ACTION_USER_LOGIN
com.spotify.proactiveplatforms.recommendationswidget.ACTION_USER_LOGOUT

com.spotify.carmobile.carnotifications.CarNotificationsAclReceiver

android.bluetooth.device.action.ACL_CONNECTED
android.bluetooth.device.action.ACL_DISCONNECTED

com.spotify.preload.notification.PreloadNotificationReceiver

android.intent.action.BOOT_COMPLETED
com.spotify.preload.notification.ALARM

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

Services

com.spotify.music.libs.mediabrowserservice.SpotifyMediaBrowserService

android.media.browse.MediaBrowserService

com.spotify.interapp.service.service.AppProtocolRemoteService

com.spotify.mobile.appprotocol.action.START_APP_PROTOCOL_SERVICE

com.spotify.wear.wearabledatalayer.SpotifyWearableListenerService

com.google.android.gms.wearable.MESSAGE_RECEIVED
com.google.android.gms.wearable.REQUEST_RECEIVED

com.spotify.connect.mediarouteprovider.SpotifyMediaRouteProviderService

android.media.MediaRouteProviderService

com.spotify.notifications.notificationssdk.SpotifyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.spotify.music.alarmlauncher.SpotifyAlarmLauncherService

com.spotify.music.ACTION_PREPARE

com.spotify.superbird.controlothermedia.NotificationListener

android.service.notification.NotificationListenerService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
TZDB.dat
baseline.prof
baseline.profm
blit_vertex_shader.glsl
copy_external_fragment_shader.glsl
event_page_response.json
licenses.xhtml
.html
looking-for-devices-spinner.json
quicksilverCardAutomationInterface.js
.js
response.json

Android Permissions

Spotify.apk

Permissions

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

com.spotify.music.permission.C2D_MESSAGE

com.spotify.music.permission.INTERNAL_BROADCAST

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH_SCAN

com.spotify.music.permission.SECURED_BROADCAST

android.permission.USE_CREDENTIALS

android.permission.GET_ACCOUNTS

com.sony.snei.np.android.account.provider.permission.DUID_READ_PROVIDER

com.android.launcher.permission.INSTALL_SHORTCUT

com.samsung.WATCH_APP_TYPE.Companion

com.google.android.gms.permission.AD_ID

com.sec.android.app.clockpackage.permission.READ_ALARM

com.samsung.android.rubin.context.permission.READ_CONTEXT_MANAGER

android.permission.BLUETOOTH_ADVERTISE

com.google.android.apps.meetings.permission.MEET_LIVE_SHARING

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.spotify.music.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.samsung.android.samsungaccount.permission.ACCOUNT_MANAGER

com.android.vending.BILLING

Sharing

General

Malware Config

Signatures

Files

com.spotify.music

com.spotify.music.MainActivity

Activities

com.spotify.music.MainActivity

com.spotify.partneraccountlinking.partneraccountlinking.PartnerAccountLinkingActivity

com.spotify.login.loginflowimpl.LoginActivity

com.spotify.appauthorization.sso.AuthorizationActivity

com.spotify.allboarding.allboardingimpl.AllboardingActivity

com.spotify.gpb.formofpaymentgpb.checkoutpage.GoogleCheckoutActivity

com.spotify.appauthorization.externallogin.LoginRedirectActivity

com.facebook.CustomTabActivity

Permissions

Receivers

com.spotify.interapp.service.service.BluetoothAclReceiver

com.spotify.interapp.service.service.InterAppStartServerReceiver

com.spotify.accessory.statemanagerimpl.bluetooth.connectionstate.BluetoothConnectionStateReceiver

com.spotify.carmobile.wazesdk.navigation.WazeWakeUpReceiver

com.spotify.widget.widget.SpotifyWidget

com.spotify.mediasession.mediasession.receiver.MediaButtonReceiver

com.spotify.music.alarmlauncher.SpotifyAlarmLauncherReceiver

com.spotify.proactiveplatforms.recommendationswidget.RecommendationsWidgetProvider

com.spotify.carmobile.carnotifications.CarNotificationsAclReceiver

com.spotify.preload.notification.PreloadNotificationReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

Services

com.spotify.music.libs.mediabrowserservice.SpotifyMediaBrowserService

com.spotify.interapp.service.service.AppProtocolRemoteService

com.spotify.wear.wearabledatalayer.SpotifyWearableListenerService

com.spotify.connect.mediarouteprovider.SpotifyMediaRouteProviderService

com.spotify.notifications.notificationssdk.SpotifyFirebaseMessagingService

com.spotify.music.alarmlauncher.SpotifyAlarmLauncherService

com.spotify.superbird.controlothermedia.NotificationListener

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

Spotify.apk