General

  • Target

    Spotify v8.9.38.494 (Premium).apk

  • Size

    76.6MB

  • MD5

    7e853dd08e1d3749523fcf2abc292a15

  • SHA1

    be43b2ac17a2b7f2066b5145e8c14ed88c83c8fd

  • SHA256

    70150c4cd66711e33329e629f37900de797a40079fae08517e1ff4c399970ae1

  • SHA512

    834fb1b86505860db07d2f9d52e52fc95526c435cfa0293de068c626fde925e21fd3e6426c2f32b7eb895ef542995443005ef9a0b0223624fcdff27370be8223

  • SSDEEP

    1572864:dmjGTbOL5hX+KqupgGZYB5Q94FFJdVczXDjR:gkiL5ltlpLZYJBdVaXDjR

Score
6/10

Malware Config

Signatures

  • Declares services with permission to bind to the system 1 IoCs
  • Requests dangerous framework permissions 11 IoCs

Files

  • Spotify v8.9.38.494 (Premium).apk
    .apk android arch:arm64 arch:arm

    Password: Watdahel

    com.spotify.music

    com.spotify.music.SpotifyMainActivity


Android Permissions

Spotify v8.9.38.494 (Premium).apk

Permissions

android.permission.READ_PHONE_STATE

android.permission.VIBRATE

android.permission.ACCESS_NETWORK_STATE

android.permission.ACCESS_WIFI_STATE

android.permission.BROADCAST_STICKY

android.permission.INTERNET

android.permission.MODIFY_AUDIO_SETTINGS

android.permission.NFC

android.permission.FOREGROUND_SERVICE

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.READ_MEDIA_IMAGES

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.CHANGE_WIFI_MULTICAST_STATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.POST_NOTIFICATIONS

com.spotify.music.permission.C2D_MESSAGE

com.spotify.music.permission.INTERNAL_BROADCAST

android.permission.BLUETOOTH

android.permission.BLUETOOTH_ADMIN

android.permission.BLUETOOTH_CONNECT

android.permission.BLUETOOTH_SCAN

android.permission.RECORD_AUDIO

com.spotify.music.permission.SECURED_BROADCAST

android.permission.USE_CREDENTIALS

android.permission.GET_ACCOUNTS

com.sony.snei.np.android.account.provider.permission.DUID_READ_PROVIDER

com.android.launcher.permission.INSTALL_SHORTCUT

com.samsung.WATCH_APP_TYPE.Companion

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE

com.google.android.gms.permission.AD_ID

com.sec.android.app.clockpackage.permission.READ_ALARM

android.permission.BLUETOOTH_ADVERTISE

com.samsung.android.rubin.context.permission.READ_CONTEXT_MANAGER

com.google.android.c2dm.permission.RECEIVE

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

com.google.android.apps.meetings.permission.MEET_LIVE_SHARING

com.spotify.music.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

com.android.vending.BILLING

com.samsung.android.samsungaccount.permission.ACCOUNT_MANAGER