75f9c788b5dc74c94471257932c8ed3138ee7ea4301f0eced746437cda6e4e1b

Analysis

user interaction
yes
max time kernel
37s
max time network
47s
platform
android-15_x64
resource
android-35-x64-arm64-20260325-en
resource tags

arch:arm64arch:x64image:android-35-x64-arm64-20260325-enlocale:en-usos:android-15-x64system
submitted
02/10/2026, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Spotify Premium v9.1.88.2204 - androforever.com.apk
Size 87.7MB
Sample261002-ejk6csshnb
SHA256 75f9c788b5dc74c94471257932c8ed3138ee7ea4301f0eced746437cda6e4e1b
MD5 b8cc76564a39cfc3225a8b380f2db1d6
SHA1 b4b15e159efacecd02e4355c3e9de8516e1f9355
SHA512 068439a05e37c14baff96ea04296959cf04dfc278a9f36ac65b787685a8835ec287e75cc89be5f8f6f6b90a9616bd8d3afc6141da8e1906c83d05ba8b343b377
SSDEEP 1572864:Ki1OuMTKPlE6AczSCoLfUz228R64misKj0I6nA:KTULz/aUisrk
TLSH
T1E318D007F94544A9D97BA6B6B68F6332C4173C09473290477A5C5B0FBFA32D04B2ABE1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery impact

Malware Config

Signatures

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	com.music.spotui

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.music.spotui

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
46	raw.githubusercontent.com
48	raw.githubusercontent.com

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.music.spotui

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.music.spotui

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.music.spotui

com.music.spotui
1⤵
- Checks Android system properties for emulator presence.
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Checks memory information
PID:3457

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

journal.tmp

Path /data/data/com.music.spotui/cache/http_cache/journal.tmp
Size 36B
SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
MD5 37e8e716e0e2f4a0b05cd9571d95b84d
SHA1 f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA512 e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
MD5 SHA1 SHA512

Submit Download

base.3457.tmp

Path /data/data/com.music.spotui/cache/oat_primary/x86_64/base.3457.tmp
Size 1.8MB
SHA256 4619ad44df7215e2f563ffb3fa0aa5b97b398faf0bee96bf98eaf0353f87217a
MD5 41d849bc3f9f34efb0f13b6154ba4ae3
SHA1 20585d78a446272d203d098648d2e768e2b25352
SHA512 7dab7158313c82a763a23e59542c374d9ec6b693d3c54eeb547cca55d313dbc12f6aa3de17f3e3c2c441ff5f967a39e1d6f5ffbed0f22d367c5a690dbfbb8867
SSDEEP 24576:WEOmGW2kNon4fiwQldUXo9Txew9hhTFcCMgn2syM:EW2wr2ldUXoyATZcCMWy
TLSH
T168855BEFBE229021C19EBFF69F4245E9FD25C012225B280464A1677DE433F54E7A4FA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exoplayer_internal.db

Path /data/data/com.music.spotui/databases/exoplayer_internal.db
Size 32KB
SHA256 b46cd5ec8e11829d472e46fefe001a57d20c62da624fcd6405556e8feccd1203
MD5 2ace9bb6895745229fbd2ac3d93c4819
SHA1 9be8892ef1d66458b13d806d446d3b2ffd799143
SHA512 5d8be1d1c03070346875aaa91a25917cdc772d373d7f43676e06dd40bea333c9c81275995be36e8d4225578ff895e151c89e43a5088f0e20128dc481216046b9
SSDEEP 48:TsSZDvSoS3KEvSRSu/bZDv/br/beooGEwSFFu/tV:fV+5F
TLSH
T154E203AF0B383331C4DD0276A5C146F72BECA21C47304A62BDE0A4579D8F59D76B5CA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exoplayer_internal.db-journal

Path /data/data/com.music.spotui/databases/exoplayer_internal.db-journal
Size 8KB
SHA256 ec661e7fe777ea77941616ab817f41c18eceba81a0a004deb747cb3ca68d835d
MD5 8575556e11b43eaad52f68398ddc55a1
SHA1 c1c693b6a604717b5b4c1a68d103e74b9932c2ff
SHA512 e33cc1c902d0460383e8d032bba5fb120b385aaab7e7489168ba38bca0541a85a3e8018abca38b7427bf946f34d590e0c82c1aab702e510be12d232f51f692d7
SSDEEP 6:7+/l99kqFPg9bNFlqhO1SllWlOERX4PBX4ogLugMBX4suuKmLt/2Z:7+tvqLmqioRmBEyPbXL12Z
TLSH
T19E0222CA67811C03EA1E267B90C883682E02A3288121CB0705E008682C034CCACE0D4A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exoplayer_internal.db-journal

Path /data/data/com.music.spotui/databases/exoplayer_internal.db-journal
Size 16KB
SHA256 b85c55ddf7968db7689d068f4ac1b39bcc47e42a506455b5c2ceef24f193336a
MD5 3bce7b2dcee6ec248fd82742e97a6b7c
SHA1 ea73c75d5c4721d6ead57e35e131be7c61701769
SHA512 9d3e8633f55364d0daac21cf7e7459bfc5ab4a42d64bda30aec0ba4b2ad6363530ead34d68034a93065dac9b3c7b2b98130952326fa5a926a6ad81e136d43daa
SSDEEP 24:7+tKXCqLj/bZDv/br/be9Oy9vGoGIVyteGSJ:7MKXCq//bZDv/br/beooGEwSJ
TLSH
T1E572265E0B382331C05A43BBA1C742B62FEC571C87328A66BDA0E0579D8B09C75A9C35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exoplayer_internal.db-journal

Path /data/data/com.music.spotui/databases/exoplayer_internal.db-journal
Size 512B
SHA256 a9b84ef2b8ee512501f6f2b82e76efa37c59fba38b970ac92db4c62679e66764
MD5 b566144ae57ad9cffb7b684c13aa7e4e
SHA1 08e6ae9cddda7acb8959e26e604b39c1093eda57
SHA512 dfa12818d3c4dc08acdeb40a3d082307ed270f1bb52dd8b436c5a635b324d78968b87bcc5319ffa0b0eaba57047f471911c8dc9dca6612e1fe35de4f0a51abf9
MD5 SHA1 SHA512

Submit Download

exoplayer_internal.db-journal

Path /data/data/com.music.spotui/databases/exoplayer_internal.db-journal
Size 8KB
SHA256 914f98aa32162480a006fc19938d4943285f237547469060cf11b0e8af715233
MD5 e11494acd3f9304bb29320b45120fbbc
SHA1 52f87a00eba15eaa4a4d6544732067b9d5559537
SHA512 79e8e3557d2703820b5fb902350e0449f887622ad4113d5924b5da1479d2f390fa06bc235912925fa10046fc99c7eb7d7e142848b8bfb93a04155ba0ea55ef85
SSDEEP 6:7+/l9Gn1Bvg9bNFlEuWdkG4lWlOERX4PBX4ogLugMBX4suuKen:7+tIvqLiuWdQoRmBEyPbl
TLSH
T1810222D8A7800912CC1A1677DCD4839C0D20B7298172CB0B06500894AC078CCA8A1D08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exoplayer_internal.db-journal

Path /data/data/com.music.spotui/databases/exoplayer_internal.db-journal
Size 4KB
SHA256 ddda70c3ab4a6754556de2155caa3fadf57fb0f9b61a27bf1ccb459e5442ae19
MD5 6a8dea2903fe662227d4322733daa3f8
SHA1 5cd6a78796c5ab73210b126639498718c311d8a0
SHA512 58a4b15374afc311f90db0d6a8c10df8ecd798f75e33835ebfb973f655f53a17ae972a23fd21c37e12eb3caaaeb5ee7ec9fe02b9277a9575257c1ac6c8e3aaae
SSDEEP 6:7+/lZ7GGPg9bNFlLdvlWlOERX4PBX4ogLugMBX4suuKfA:7+tFpqLJdvloRmBEyPbKA
TLSH
T11A91808D67410D13C59A6BBB90D9839D1D147B598373CB57155008947E476CCEC90D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

profileInstalled

Path /data/data/com.music.spotui/files/profileInstalled
Size 24B
SHA256 3861228fcaf64236447d1735713dedb01eb41dc446e876697159de866d952982
MD5 afdeaec76f23f6f006b0aab0c67d7184
SHA1 416eb19fc69cad318a3033bebef7bc89999d83ea
SHA512 9b3f42ff9ddd5a2537972e00cc64e88b7a6c8b938a241d454072fe1fb3f58a7cf9d0557dd9dc8b63357e32ee9a5c86638c4ac80a95c477e0229f91213f32ea21
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.music.spotui/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 1ce1f9d7d0c502391c430bbe64056aad7fd38df03a35dd50e4de57ce8ec0cfa5
MD5 df32d941fcdd6fac874eef96eb8e66e8
SHA1 536136587575ab1baa7baf50e9b9c765387abd48
SHA512 85766f4b0930e6e65961c05b5dec841e811dc5be6201dc1836a318ae49d53788071ba13f7204ed02f455e2106d53c98c20885d225aa14baba98633a974b287e1
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.music.spotui/primary.prof
Size 14KB
SHA256 e5f601f4309c9d4e8791f3c16858cced6cca3cf9d12e6b3e0961b35442d3aa14
MD5 5c94a7a07c4d6c228bdc50c85f301297
SHA1 490402d66fc2e88cac6ec9f3d3ef17ed6c152d74
SHA512 3bc0645143a8f904c0ab5ac508770c2bdaf16d41a4d11b5c0778e97d3dd9cbbcf5413df3d06fd5d74e816cfdd0dfd9ab68fd01183fe0b76699c1bbeb583488c6
SSDEEP 384:e1tOfNuyOTg0FDGgW7ELxyxZXmTJEugliGgFy:MYOKE9QXhlX7
TLSH
T1C162C047C3B93661902C083DA8D36AD8EC7CB9DF0C5677EA2DA60CE67447E49D4821F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads