spicy-lyrics-mobile-v0[.]14[.]4[.]apk

Resubmissions

23/10/2026, 18:09

261023-wrvhfac1216

23/10/2026, 18:08

261023-wqxw6sc12t6

23/10/2026, 18:05

261023-wpdrxafv4l7

Sharing

Copy URL Twitter E-mail

General

Target
spicy-lyrics-mobile-v0.14.4.apk
Size 18.2MB
Sample261023-wpdrxafv4l
SHA256 e02f2914902b179a72adfe271a8e95e0c3ba2f29e5acd2e58ac1326b4633d94d
MD5 c7deb87c68367a6675d5ee7084573764
SHA1 d092d27b639c62319111c1acb4264f71ed1c7819
SHA512 5c5b5305bdd36a8e3c1b9439970d724e0fb7f9d27ab2847201a617dcc918a717abdce569eb79e9a7de79bf07aec5d05da2d682b451648a736a6dcd885232b11c
SSDEEP 393216:7LIRka28VSpdkUdV+ItpoPQ2tRmUbiTHP1izhJXFhSOkvDeLwYKXvSbo:7kmaTVSpd1NtOPQCR7bibPozhrhSHLes
TLSH
T15C173352F668BA1FC435B1762847D13A22259D26C702BBCBB44037FD79BB3984E407DA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 1 IoCs

description	ioc
Required by notification listener services to bind with the system. Allows apps to listen to and interact with notifications on the device.	android.permission.BIND_NOTIFICATION_LISTENER_SERVICE

Requests dangerous framework permissions 1 IoCs

description	ioc
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
spicy-lyrics-mobile-v0.14.4.apk

File Explorer

spicy-lyrics-mobile-v0.14.4.apk

.apk 18.2MB

spicy-lyrics-mobile-v0.14.4.apk

SHA256 e02f2914902b179a72adfe271a8e95e0c3ba2f29e5acd2e58ac1326b4633d94d
MD5 c7deb87c68367a6675d5ee7084573764
SHA1 d092d27b639c62319111c1acb4264f71ed1c7819
SHA512 5c5b5305bdd36a8e3c1b9439970d724e0fb7f9d27ab2847201a617dcc918a717abdce569eb79e9a7de79bf07aec5d05da2d682b451648a736a6dcd885232b11c
SSDEEP 393216:7LIRka28VSpdkUdV+ItpoPQ2tRmUbiTHP1izhJXFhSOkvDeLwYKXvSbo:7kmaTVSpd1NtOPQCR7bibPozhrhSHLes
TLSH
T15C173352F668BA1FC435B1762847D13A22259D26C702BBCBB44037FD79BB3984E407DA
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

a5352278a81d0bd56f1d90128bb70fa94522edee5f943936d5f763894236e46b32d276c308f71b0cba0e6114c4527ae90ca71c909d3ad226edc816bc04f3b537

Digest Algorithm

sha512

Digest Matches

Trusted

Not trusted

Signer

CN=Spicy Player,O=TX24

com.tx24.spicyplayer.next

Android Permissions

spicy-lyrics-mobile-v0.14.4.apk

Permissions

android.permission.INTERNET

android.permission.ACCESS_NETWORK_STATE

android.permission.VIBRATE

android.permission.REQUEST_INSTALL_PACKAGES

com.google.android.apps.aicore.service.BIND_SERVICE

com.tx24.spicyplayer.next.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

android.permission.WAKE_LOCK

spicy-lyrics-mobile-v0.14.4.apk

File Signature issue

com.tx24.spicyplayer.LyricsActivity

com.google.android.gms.common.api.GoogleApiActivity

com.tx24.spicyplayer.playback.SessionAccessService

com.google.mlkit.common.internal.MlKitComponentDiscoveryService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

com.tx24.spicyplayer.update.UpdateInstallReceiver

androidx.profileinstaller.ProfileInstallReceiver

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

com.google.mlkit.common.internal.MlKitInitProvider

androidx.startup.InitializationProvider