be606f5f27b59c0ba63c4da78551394b10303c9c6deae652451f4b66c868f4fd | Triage™

Login
Reports

Overview

overview

7

Static

static

6

SpotiCap2.3.apk

android-14-x64

7

Sharing

Copy URL Twitter E-mail

General

Target
SpotiCap2.3.apk
Size 6.3MB
Sample260804-m9xwvaaa92
SHA256 be606f5f27b59c0ba63c4da78551394b10303c9c6deae652451f4b66c868f4fd
MD5 f9e9b1292bba496a748fb5accececa4a
SHA1 e9fbf70150c9b8f7f7b810e402d9eca43e55b4cc
SHA512 a1ec975deec909bb33287c17f97e287b2f2dc966f0798a4a3e4d46372a22b18270f762e55e588263c8afa75ca532bea90bff41afe199de7855582427c9b91c8b
SSDEEP 98304:wrCpgD3NL5vav/wj7bUq0eaZ+I6xXyJ2OphTmow2GmPOd6hkffIyY7cr1lejH0g:CNRav4j7VXW46lcoX9PgffIysVHF
TLSH
T1B2662342E3E6AE6FCC7781361FEB673506514E16DA91D3838924B21C6EBB9C84F14BC4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

android spotify collection credential_access defense_evasion impact phishing

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

SpotiCap2.3.apk

Resource

android-34-x64-arm64-20260325.1-en

android-14-x64

6 signatures

150 seconds

spotify collection credential_access defense_evasion impact phishing

Malware Config

Targets

- Target
  SpotiCap2.3.apk
- Size 6.3MB
- SHA256 be606f5f27b59c0ba63c4da78551394b10303c9c6deae652451f4b66c868f4fd
- MD5 f9e9b1292bba496a748fb5accececa4a
- SHA1 e9fbf70150c9b8f7f7b810e402d9eca43e55b4cc
- SHA512 a1ec975deec909bb33287c17f97e287b2f2dc966f0798a4a3e4d46372a22b18270f762e55e588263c8afa75ca532bea90bff41afe199de7855582427c9b91c8b
- SSDEEP 98304:wrCpgD3NL5vav/wj7bUq0eaZ+I6xXyJ2OphTmow2GmPOd6hkffIyY7cr1lejH0g:CNRav4j7VXW46lcoX9PgffIysVHF
- TLSH
  T1B2662342E3E6AE6FCC7781361FEB673506514E16DA91D3838924B21C6EBB9C84F14BC4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

spotify collection credential_access defense_evasion impact phishing
- Checks Android system properties for emulator presence.
  defense_evasion
- Obtains sensitive information copied to the device clipboard
  Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
  collection credential_access impact
- Checks the presence of a debugger
  defense_evasion
- Detected potential entity reuse from brand SPOTIFY.
  phishing spotify
behavioral1

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

System Checks

Credential Access

Clipboard Data

Discovery

System Information Discovery

Lateral Movement

Collection

Clipboard Data

Command and Control

Exfiltration

Impact

Data Manipulation

Transmitted Data Manipulation

Tasks

static1

behavioral1

spotifycollectioncredential_accessdefense_evasionimpactphishing

© 2018-2026

Terms | Privacy