hxxps://www[.]mediafire[.]com/file/0v5uk3hxt12d6yk/Spotify_Premium_%2528armeabi-v7a%2529_v8[.]7[.]78[.]373_-_espacioapk[.]com[.]apk/file

Analysis

max time kernel
636s
max time network
802s
platform
android_x64
resource
android-x64-arm64-20240624-es
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-eslocale:es-esos:android-11-x64system
submitted
29/06/2024, 23:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.mediafire.com/file/0v5uk3hxt12d6yk/Spotify_Premium_%2528armeabi-v7a%2529_v8.7.78.373_-_espacioapk.com.apk/file

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 9 IoCs

description	ioc
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an application to read image files from external storage.	android.permission.READ_MEDIA_IMAGES
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Required to be able to discover and pair nearby Bluetooth devices.	android.permission.BLUETOOTH_SCAN
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS

Checks CPU information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.android.chrome
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4261

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:5948

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html

Filesize
327KB

MD5
4cd2cf4733834f4399aecccd1a14c2b8

SHA1
6e58e35d2f6d5614f32e7d552d0392a6222f19a2

SHA256
d22e71dfcea1ed1b63d8a3073737954f8f3d99a545f1a4eecfa4e71b12fb1467

SHA512
2ba81b41e4597dffd4c63b359f5af0d4532327703af8d6c6411220ad724fc5514e41f0a5b28c3437433e7106af7e3ddaf766539d0fc17426d73c83345d85fe98

Download Submit
files/dom-1.html

Filesize
67KB

MD5
0bd4558844fe6d59d868f06b92eff069

SHA1
b72daeb86bcd5cf8a25d2e8418d75dc9018d3f73

SHA256
28f9984096f05f02f0f8bb0f16fae545f4139bacc2153e0aff167b5eecde9ce4

SHA512
2aa2492181ba0b6b7fc80449e238dc8ec6114812174d19f4dc11f40d06a89c5c399c4e2af0173ec0844af0297ead853e7d336fab4681396936187e4c448dc67c

Download Submit
/storage/emulated/0/Download/.pending-1720306916-Spotify Premium (armeabi-v7a) v8.7.78.373 - espacioapk.com.apk

Filesize
54.3MB

MD5
627278c10903c3260db97869eacffbdc

SHA1
99688c08f163127d4514b18bbf5ed258a8cd8ab0

SHA256
d426b4be53c2d876bf27f264e6db0d6d3d77bac59eeae5123884ee5ece9de73f

SHA512
256be7d22cf7595685141511a86174e5915585c57fba022373a41a7f9b8d21a9d62ba4eb501626e86cfbd73fa651bed4f1ee9b9dabab6733ad1a7150a96099a4

Download Submit
/storage/emulated/0/Download/.pending-1720306916-Spotify Premium (armeabi-v7a) v8.7.78.373 - espacioapk.com.apk (deleted)

Filesize
512KB

MD5
59071590099d21dd439896592338bf95

SHA1
6a521e1d2a632c26e53b83d2cc4b0edecfc1e68c

SHA256
07854d2fef297a06ba81685e660c332de36d5d18d546927d30daad6d7fda1541

SHA512
eedb6cadbceb2c991fc6f68dccb80463b3f660c5358acd7d705398ae2e3df2b4327f0f6c6746486848bd2992b379776483a98063ae96edb45877bb0314874668

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads