General

  • Target

    Spotify-v8.8.4.518_build_96472618-Mod-armeabi-v7a_UserUpload.Net.apk

  • Size

    56.2MB

  • MD5

    d113905b64b4643a7d7ef50b0620a00e

  • SHA1

    0acfb23c6c4b1f96fcf35251e5081c9ad9a0537b

  • SHA256

    59db4dd4f56c27e5c04e035965e520b8a6439e45991ce314e1b59c8d5ec2b855

  • SHA512

    cc84156e1878d49f746ffdcd84c4cd8726c4887ea4fe6182d2e3e355ec8514cc412daea466f5d8a4f48d8ad6346c0d49cf4464a67638ff5ceb3e8af394ffb863

  • SSDEEP

    786432:rKslE+YyE862nm2Uy5Oh0xy82/622qUcW9pB+klbEW5zPusjNmFl:GslEhyEjOm2p5S0xy8E2qUcMgkB5jlJo

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 10 IoCs

Files

  • Spotify-v8.8.4.518_build_96472618-Mod-armeabi-v7a_UserUpload.Net.apk
    .apk android arch:arm

    Password: Infected

    com.spotify.music

    com.spotify.music.MainActivity


Android Permissions

Spotify-v8.8.4.518_build_96472618-Mod-armeabi-v7a_UserUpload.Net.apk

Permissions

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.FOREGROUND_SERVICE

android.permission.READ_PHONE_STATE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

com.spotify.music.permission.C2D_MESSAGE

com.spotify.music.permission.INTERNAL_BROADCAST

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH_SCAN

com.spotify.music.permission.SECURED_BROADCAST

android.permission.USE_CREDENTIALS

android.permission.GET_ACCOUNTS

com.sony.snei.np.android.account.provider.permission.DUID_READ_PROVIDER

com.android.launcher.permission.INSTALL_SHORTCUT

com.samsung.WATCH_APP_TYPE.Companion

com.google.android.gms.permission.AD_ID

com.sec.android.app.clockpackage.permission.READ_ALARM

com.samsung.android.rubin.context.permission.READ_CONTEXT_MANAGER

android.permission.BLUETOOTH_ADVERTISE

com.google.android.apps.meetings.permission.MEET_LIVE_SHARING

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.spotify.music.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.samsung.android.samsungaccount.permission.ACCOUNT_MANAGER

com.android.vending.BILLING