base[.]apk | Triage

Sharing

Copy URL Twitter E-mail

General

Target

base.apk
Size

26.7MB
MD5

4a046fc211d479b783ec510d36b58ef6
SHA1

6a7142d1f0817336dce97eba8098584af1808ca7
SHA256

b2067996baf300bf2d7b332be655df00819f51a77b940ae7f85762948feed437
SHA512

08e39bc9bd5adb1b01d55fcdab0d016b3fb9065e1c2da25bd5364ebf7394bf1c867db47fea93c3e15a0a59853df946310053f24cfbea50b3f48edb78ba3bce8e
SSDEEP

393216:SkYLgi8nm8MVIrEruydRaPHgrexXgFEiiq8lhNf09CqQD7geikhAS7nrXHa+Thdp:SkYUi7VIZyLCAWQ2i8PfquX7rXHr21s

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 11 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Required to be able to advertise to nearby Bluetooth devices	android.permission.BLUETOOTH_ADVERTISE

Files

base.apk
.apk android

com.spotify.music

com.spotify.music.MainActivity

Activities

com.spotify.music.MainActivity

android.intent.action.MAIN
android.intent.action.MAIN
android.intent.action.MUSIC_PLAYER
android.nfc.action.NDEF_DISCOVERED
android.intent.action.SEARCH
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.VIEW
android.intent.action.SEARCH
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.media.action.MEDIA_PLAY_FROM_SEARCH
android.intent.action.APPLICATION_PREFERENCES
com.sonymobile.media.dashboard.ACTION_VIEW_MUSIC_TILE
android.intent.action.VIEW
android.intent.action.VIEW
com.google.android.meet.ADDONS_SUPPORT

com.spotify.login.loginflowimpl.LoginActivity

com.spotify.mobile.android.service.action.session.LOGIN

com.spotify.partneraccountlinking.partneraccountlinking.PartnerAccountLinkingActivity

android.intent.action.VIEW

com.spotify.appauthorization.sso.AuthorizationActivity

com.spotify.sso.action.START_AUTH_FLOW
com.spotify.sso.action.START_GOOGLE_AUTH_FLOW_V1
android.intent.action.VIEW

com.spotify.allboarding.allboardingimpl.AllboardingActivity

spotify.intent.action.ALLBOARDING

com.spotify.gpb.googlecheckout.GoogleCheckoutActivity

spotify.intent.action.GPB_CHECKOUT

com.spotify.gpb.googlecheckout.TranslucentGoogleCheckoutActivity

spotify.intent.action.GPB_CHECKOUT

com.spotify.appauthorization.externallogin.LoginRedirectActivity

com.spotify.music.ACTION_EXTERNAL_LOGIN

com.facebook.CustomTabActivity

android.intent.action.VIEW

Permissions

android.permission.READ_PHONE_STATE
android.permission.VIBRATE
android.permission.ACCESS_NETWORK_STATE
android.permission.ACCESS_WIFI_STATE
android.permission.BROADCAST_STICKY
android.permission.INTERNET
android.permission.MODIFY_AUDIO_SETTINGS
android.permission.NFC
android.permission.FOREGROUND_SERVICE
android.permission.WAKE_LOCK
android.permission.READ_EXTERNAL_STORAGE
android.permission.READ_MEDIA_AUDIO
android.permission.READ_MEDIA_IMAGES
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.CHANGE_WIFI_MULTICAST_STATE
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.POST_NOTIFICATIONS
com.spotify.music.permission.C2D_MESSAGE
com.spotify.music.permission.INTERNAL_BROADCAST
android.permission.BLUETOOTH
android.permission.BLUETOOTH_ADMIN
android.permission.BLUETOOTH_CONNECT
android.permission.BLUETOOTH_SCAN
android.permission.RECORD_AUDIO
com.spotify.music.permission.SECURED_BROADCAST
android.permission.USE_CREDENTIALS
android.permission.GET_ACCOUNTS
com.sony.snei.np.android.account.provider.permission.DUID_READ_PROVIDER
com.android.launcher.permission.INSTALL_SHORTCUT
com.samsung.WATCH_APP_TYPE.Companion
android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK
android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE
com.google.android.gms.permission.AD_ID
com.samsung.android.rubin.context.permission.READ_CONTEXT_MANAGER
android.permission.BLUETOOTH_ADVERTISE
android.permission.FOREGROUND_SERVICE_DATA_SYNC
com.sec.android.app.clockpackage.permission.READ_ALARM
com.google.android.apps.meetings.permission.MEET_LIVE_SHARING
com.google.android.c2dm.permission.RECEIVE
com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
com.spotify.music.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
com.android.vending.BILLING
com.samsung.android.samsungaccount.permission.ACCOUNT_MANAGER

Receivers

com.spotify.interapp.service.service.BluetoothAclReceiver

android.bluetooth.device.action.ACL_CONNECTED
android.bluetooth.device.action.ACL_DISCONNECTED

com.spotify.interapp.service.service.InterAppStartServerReceiver

com.spotify.music.service.bluetooth.action.START_APP_PROTOCOL_SERVER

com.spotify.accessory.statemanagerimpl.bluetooth.connectionstate.BluetoothConnectionStateReceiver

android.bluetooth.a2dp.profile.action.CONNECTION_STATE_CHANGED

com.spotify.widget.widget.SpotifyWidget

android.appwidget.action.APPWIDGET_UPDATE
com.spotify.mobile.android.ui.widget.PREVIOUS
com.spotify.mobile.android.ui.widget.PLAY
com.spotify.mobile.android.ui.widget.NEXT
com.spotify.mobile.android.ui.widget.PROMO_CLOSE
com.spotify.mobile.android.ui.widget.PROMO_ADD_NEW_WIDGET

com.spotify.proactiveplatforms.npvwidget.NpvWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
com.spotify.proactiveplatforms.npvwidget.ACTION_USER_LOGIN
com.spotify.proactiveplatforms.npvwidget.ACTION_USER_LOGOUT
miui.appwidget.action.APPWIDGET_UPDATE

com.spotify.proactiveplatforms.recommendationswidget.RecommendationsWidgetProvider

android.appwidget.action.APPWIDGET_UPDATE
com.spotify.proactiveplatforms.recommendationswidget.ACTION_USER_LOGIN
com.spotify.proactiveplatforms.recommendationswidget.ACTION_USER_LOGOUT

com.spotify.mediasession.mediasession.receiver.MediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.spotify.carmobile.wazesdk.navigation.WazeWakeUpReceiver

com.waze.sdk.audio.ACTION_INIT

com.spotify.music.alarmlauncher.SpotifyAlarmLauncherReceiver

com.spotify.music.ACTION_PREPARE

com.spotify.carmobile.carnotifications.CarNotificationsAclReceiver

android.bluetooth.device.action.ACL_CONNECTED
android.bluetooth.device.action.ACL_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY
android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW
android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED
android.intent.action.TIME_SET
android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.spotify.preload.notification.PreloadNotificationReceiver

android.intent.action.BOOT_COMPLETED
com.spotify.preload.notification.ALARM

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE
androidx.profileinstaller.action.SKIP_FILE
androidx.profileinstaller.action.SAVE_PROFILE
androidx.profileinstaller.action.BENCHMARK_OPERATION

Services

com.spotify.music.libs.mediabrowserservice.SpotifyMediaBrowserService

android.media.browse.MediaBrowserService

com.spotify.interapp.service.service.AppProtocolRemoteService

com.spotify.mobile.appprotocol.action.START_APP_PROTOCOL_SERVICE
com.spotify.mobile.appprotocol.action.BIND_PROTOCOL_SERVICE

com.spotify.wear.wearabledatalayer.SpotifyWearableListenerService

com.google.android.gms.wearable.REQUEST_RECEIVED

com.spotify.connect.mediarouteprovider.SpotifyMediaRouteProviderService

android.media.MediaRoute2ProviderService

com.spotify.androidauto.settings.SettingsService

androidx.car.app.CarAppService
com.spotify.music.auto.SETTINGS_ACTION

com.spotify.notifications.notificationssdk.SpotifyFirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.spotify.music.alarmlauncher.SpotifyAlarmLauncherService

com.spotify.music.ACTION_ALARM_WARMUP
com.spotify.music.ACTION_PREPARE

com.spotify.superbird.controlothermedia.NotificationListener

android.service.notification.NotificationListenerService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT
LocalizedFormats_fr.properties
TZDB.dat
baseline.prof
baseline.profm
double_sparkle.json
licenses.xhtml
.html
looking-for-devices-spinner.json
lossless_lottie.json
new-joe-kuo-6.1000
quicksilverCardAutomationInterface.js
.js
single_sparkle.json

Android Permissions

base.apk

Permissions

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

com.spotify.music.permission.C2D_MESSAGE

com.spotify.music.permission.INTERNAL_BROADCAST

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH_SCAN

android.permission.RECORD_AUDIO

com.spotify.music.permission.SECURED_BROADCAST

android.permission.USE_CREDENTIALS

android.permission.GET_ACCOUNTS

com.sony.snei.np.android.account.provider.permission.DUID_READ_PROVIDER

com.android.launcher.permission.INSTALL_SHORTCUT

com.samsung.WATCH_APP_TYPE.Companion

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE

com.google.android.gms.permission.AD_ID

com.samsung.android.rubin.context.permission.READ_CONTEXT_MANAGER

android.permission.BLUETOOTH_ADVERTISE

android.permission.FOREGROUND_SERVICE_DATA_SYNC

com.sec.android.app.clockpackage.permission.READ_ALARM

com.google.android.apps.meetings.permission.MEET_LIVE_SHARING

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.spotify.music.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.android.vending.BILLING

com.samsung.android.samsungaccount.permission.ACCOUNT_MANAGER

Sharing

General

Malware Config

Signatures

Files

com.spotify.music

com.spotify.music.MainActivity

Activities

com.spotify.music.MainActivity

com.spotify.login.loginflowimpl.LoginActivity

com.spotify.partneraccountlinking.partneraccountlinking.PartnerAccountLinkingActivity

com.spotify.appauthorization.sso.AuthorizationActivity

com.spotify.allboarding.allboardingimpl.AllboardingActivity

com.spotify.gpb.googlecheckout.GoogleCheckoutActivity

com.spotify.gpb.googlecheckout.TranslucentGoogleCheckoutActivity

com.spotify.appauthorization.externallogin.LoginRedirectActivity

com.facebook.CustomTabActivity

Permissions

Receivers

com.spotify.interapp.service.service.BluetoothAclReceiver

com.spotify.interapp.service.service.InterAppStartServerReceiver

com.spotify.accessory.statemanagerimpl.bluetooth.connectionstate.BluetoothConnectionStateReceiver

com.spotify.widget.widget.SpotifyWidget

com.spotify.proactiveplatforms.npvwidget.NpvWidgetProvider

com.spotify.proactiveplatforms.recommendationswidget.RecommendationsWidgetProvider

com.spotify.mediasession.mediasession.receiver.MediaButtonReceiver

com.spotify.carmobile.wazesdk.navigation.WazeWakeUpReceiver

com.spotify.music.alarmlauncher.SpotifyAlarmLauncherReceiver

com.spotify.carmobile.carnotifications.CarNotificationsAclReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

androidx.work.impl.background.systemalarm.RescheduleReceiver

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.diagnostics.DiagnosticsReceiver

com.spotify.preload.notification.PreloadNotificationReceiver

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

androidx.profileinstaller.ProfileInstallReceiver

Services

com.spotify.music.libs.mediabrowserservice.SpotifyMediaBrowserService

com.spotify.interapp.service.service.AppProtocolRemoteService

com.spotify.wear.wearabledatalayer.SpotifyWearableListenerService

com.spotify.connect.mediarouteprovider.SpotifyMediaRouteProviderService

com.spotify.androidauto.settings.SettingsService

com.spotify.notifications.notificationssdk.SpotifyFirebaseMessagingService

com.spotify.music.alarmlauncher.SpotifyAlarmLauncherService

com.spotify.superbird.controlothermedia.NotificationListener

com.google.firebase.messaging.FirebaseMessagingService

Android Permissions

base.apk