ru-yandex-music-24025252-70606501-cff01c0f86ab34aec671db60bf63d120[.]apk

Sharing

Copy URL Twitter E-mail

General

Target
ru-yandex-music-24025252-70606501-cff01c0f86ab34aec671db60bf63d120.apk
Size 60.1MB
Sample261024-varvjscy2l
SHA256 1abfc01eadc4de4ae3fc100ab9cf916eb7df932a62ce044cc55e5db650c40485
MD5 769ccf4a67cddad467746557c6e534af
SHA1 d96bd0cb63710e9b9e44cdc45b42870b66e517ba
SHA512 6a5cdf618d4119fe501cecc964fc2a6f2c95bd0e5c4cc4bfda92fbcaed4c356c381da26920633b8493309fa3a804d344bc57072a6a07598907ae50d09bb56893
SSDEEP 786432:F1YNByY/EZthycQaAuMXAIPXtnP8NkIpaZyU4vI+UplvZHFgTtu:4ByGDlaAfXAmRP82rn4w3ZW0
TLSH
T1B0D70182F75D087EF9B690B8C50E5536E9252C69D361E2CB6A04F719B9732E08F1E7C0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Signatures

Declares services with permission to bind to the system 2 IoCs

description	ioc
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS
Required by remote views services to bind with the system. Allows apps to share and display views across different processes.	android.permission.BIND_REMOTEVIEWS

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read audio files from external storage.	android.permission.READ_MEDIA_AUDIO
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to record audio.	android.permission.RECORD_AUDIO

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
ru-yandex-music-24025252-70606501-cff01c0f86ab34aec671db60bf63d120.apk

File Explorer

ru-yandex-music-24025252-70606501-cff01c0f86ab34aec671db60bf63d120.apk

.apk 60.1MB

ru-yandex-music-24025252-70606501-cff01c0f86ab34aec671db60bf63d120.apk

SHA256 1abfc01eadc4de4ae3fc100ab9cf916eb7df932a62ce044cc55e5db650c40485
MD5 769ccf4a67cddad467746557c6e534af
SHA1 d96bd0cb63710e9b9e44cdc45b42870b66e517ba
SHA512 6a5cdf618d4119fe501cecc964fc2a6f2c95bd0e5c4cc4bfda92fbcaed4c356c381da26920633b8493309fa3a804d344bc57072a6a07598907ae50d09bb56893
SSDEEP 786432:F1YNByY/EZthycQaAuMXAIPXtnP8NkIpaZyU4vI+UplvZHFgTtu:4ByGDlaAfXAmRP82rn4w3ZW0
TLSH
T1B0D70182F75D087EF9B690B8C50E5536E9252C69D361E2CB6A04F719B9732E08F1E7C0
MD5 SHA1 SHA512 SSDEEP TLSH

android arch:arm64 arch:arm arch:x86 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

File Signature issue

Digest

a00b0c14699c0dbd63baf1ee1cce9e3bc810d7727c21e3a32351a25304202cc6

Digest Algorithm

sha256

Digest Matches

Trusted

Not trusted

Signer

CN=OOO Yandex,OU=Mobile Development,O=OOO Yandex,L=Moscow,ST=Moscow,C=RU

ru.yandex.music

ru.yandex.music.wizard.WizardActivityOld

ru.yandex.music.wizard3.WizardActivity

ru.yandex.music.main.MainScreenActivity

ru.yandex.music.settings.SettingsActivity

ru.yandex.music.settings.screen.QualitySettingsActivity

ru.yandex.music.support.AppFeedbackActivity

ru.yandex.music.profile.ProfileActivity

ru.yandex.music.phonoteka.mymusic.CollectionMainActivity

ru.yandex.music.search.SearchActivity

ru.yandex.music.onboarding.OnboardingActivity

ru.yandex.music.url.ui.UrlActivity

android.intent.action.VIEW android.intent.action.VIEW android.intent.action.VIEW com.google.android.gms.actions.SEARCH_ACTION android.media.action.MEDIA_PLAY_FROM_SEARCH

ru.yandex.music.chat.SupportChatActivity

ru.yandex.music.payment.tariffpaywall.TariffPaywallActivity

ru.yandex.music.communication.trigger.CommunicationTriggerActivity

ru.yandex.music.auth.login.LoginActivity

ru.yandex.music.auth.ReloginActivity

ru.yandex.music.catalog.album.screen.AlbumScreenActivity

ru.yandex.music.catalog.artist.screen.ArtistScreenActivity

ru.yandex.music.nonmusic.shelf.screen.MyShelfScreenActivity

ru.yandex.music.nonmusic.shelf.screen.MyShelfEntitiesScreenActivity

ru.yandex.music.in_app_restore.RestorePurchasesActivity

ru.yandex.music.url.ui.StubActivity

ru.yandex.music.settings.AboutActivity

ru.yandex.music.landing.skeleton.SkeletonScreenActivity

ru.yandex.music.mixes.TagActivity

ru.yandex.music.mixes.MixesScreenActivity

ru.yandex.music.catalog.artist.ArtistItemsActivity

ru.yandex.music.catalog.playlist.editor.PlaylistEditorActivity

ru.yandex.music.catalog.playlist.screen.PlaylistScreenActivity

ru.yandex.music.paywalloptions.PaywallOptionsActivity

ru.yandex.music.payment.deeplinkpaymentscreen.DeeplinkPaymentScreenActivity

ru.yandex.music.catalog.info.FullInfoActivity

ru.yandex.music.post.ui.grid.PostGridItemsActivity

ru.yandex.music.landing.autoplaylists.gag.AutoPlaylistGagActivity

ru.yandex.music.bullfinch.BullfinchActivity

ru.yandex.music.common.activity.ExternalDomainActivity

ru.yandex.music.concert.ConcertActivity

ru.yandex.music.concert.ticket.PurchaseTicketActivity

ru.yandex.music.debug.DebugSettingsActivity

ru.yandex.music.debug.logs.InspectLogsActivity

ru.yandex.music.debug.config.DebugConfigActivity

ru.yandex.music.catalog.artist.gallery.ArtistGalleryActivity

ru.yandex.music.catalog.artist.familiar.ArtistFamiliarActivity

ru.yandex.music.catalog.artist.concerts.ArtistConcertsActivity

ru.yandex.music.catalog.universalentity.UniversalEntityActivity

ru.yandex.music.novelties.podcasts.PodcastsActivity

ru.yandex.music.novelties.podcasts.catalog.PodcastsCatalogActivity

ru.yandex.music.kids.KidsCatalogActivity

ru.yandex.music.chart.catalog.ChartActivity

ru.yandex.music.metatag.playlist.MetaTagPlaylistsActivity

ru.yandex.music.metatag.album.MetaTagAlbumsActivity

ru.yandex.music.metatag.artist.MetaTagArtistsActivity

ru.yandex.music.congratulations.CongratulationsScreenActivity

ru.yandex.music.phonoteka.playlist.editing.EditPlaylistTracksActivity

ru.yandex.music.gdpr.GdprScreenActivity

ru.yandex.music.share.ShareToActivity

ru.yandex.speechkit.gui.RecognizerActivity

ru.yandex.music.support.NonInteractiveFeedbackActivity

ru.yandex.music.share.CopyExtraTextActivity

ru.yandex.music.yandexplus.home.PlusHomeActivity

ru.yandex.music.cards.CardsActivity

ru.yandex.music.auth.login.OldLoginActivity

ru.yandex.music.new_cards.SlideActivity

ru.yandex.music.cast.ui.WebViewActivity

ru.yandex.music.url.schemes.playVibe.EmptyScreenInDeeplinkActivity

ru.yandex.music.support.complaint.ComplaintActivity

ru.yandex.music.payment.pay.PromoCodeWebViewActivity

ru.yandex.music.videoclip.VideoClipActivity

ru.yandex.music.widget2.WidgetSettingsScreenActivity

android.appwidget.action.APPWIDGET_CONFIGURE

ru.yandex.music.history.MusicHistoryScreenActivity

com.yandex.passport.internal.warm.WarmUpWebViewActivity

com.yandex.passport.internal.ui.router.LoginRouterActivity

com.yandex.intent.ADD_ACCOUNT com.yandex.passport.ACTION_SYSTEM_ADD_ACCOUNT

com.yandex.passport.internal.ui.router.GlobalRouterActivity

com.yandex.passport.internal.ui.sloth.menu.UserMenuActivity

com.yandex.passport.internal.ui.domik.DomikActivity

com.yandex.passport.internal.ui.webview.WebViewActivity

com.yandex.passport.internal.ui.browser.SocialBrowserActivity

com.yandex.passport.internal.links.LinksHandlingActivity

com.yandex.passport.internal.ui.browser.SocialBrowserDataActivity

android.intent.action.VIEW android.intent.action.VIEW

com.yandex.passport.internal.ui.authsdk.AuthSdkActivity

com.yandex.passport.internal.ui.AutoLoginActivity

com.yandex.passport.internal.ui.autologin.AutoLoginRetryActivity

com.yandex.passport.internal.ui.social.mail.MailPasswordLoginActivity

com.yandex.passport.internal.ui.social.gimap.MailGIMAPActivity

com.yandex.passport.internal.ui.SocialApplicationBindActivity

com.yandex.passport.internal.ui.SocialBindActivity

com.yandex.passport.internal.social.VkNativeSocialAuthActivity

com.yandex.passport.action.NATIVE_SOCIAL_VKONTAKTE_AUTH

com.yandex.passport.internal.social.GoogleNativeSocialAuthActivity

com.yandex.passport.action.NATIVE_SOCIAL_GOOGLE_AUTH com.yandex.passport.action.NATIVE_MAILISH_GOOGLE_AUTH

com.yandex.passport.internal.ui.AccountNotAuthorizedActivity

com.yandex.passport.internal.ui.authwithtrack.SendAuthToTrackActivity

com.yandex.passport.action.SEND_AUTH_TO_TRACK

com.yandex.passport.internal.ui.authbytrack.AuthByTrackActivity

com.yandex.passport.internal.ui.tv.AuthInWebViewActivity

com.yandex.passport.internal.ui.account_upgrade.AccountUpgraderActivity

com.yandex.passport.internal.sloth.credentialmanager.RequestCredentialManagerActivity

com.yandex.passport.internal.sloth.credentialmanager.SaveCredentialManagerActivity

com.yandex.passport.internal.ui.YxAuthActivity

android.intent.action.VIEW

com.yandex.passport.internal.ui.bouncer.BouncerActivity

com.yandex.passport.internal.ui.challenge.logout.LogoutActivity

com.yandex.passport.internal.ui.challenge.delete.DeleteForeverActivity

com.yandex.passport.internal.ui.challenge.changecurrent.SetCurrentAccountActivity

com.yandex.passport.internal.ui.sloth.StandaloneSlothActivity

com.yandex.passport.internal.ui.sloth.authsdk.AuthSdkSlothActivity

com.yandex.passport.internal.ui.sloth.plusdevices.ManagingPlusDevicesHelperActivity

com.yandex.passport.internal.ui.sloth.plusdevices.ManagingPlusDevicesSlothActivity

com.yandex.passport.internal.ui.sloth.webcard.WebCardSlothActivity

com.yandex.passport.internal.ui.challenge.logout.bottomsheet.LogoutBottomSheetActivity

com.yandex.passport.internal.util.StarterActivity

com.yandex.plus.pay.ui.core.internal.tarifficator.TarifficatorScenarioActivity

com.yandex.plus.pay.ui.core.internal.bdui.BduiScenarioActivity

com.yandex.plus.paymentsdk.common.PlusSbpRedirectActivity

android.intent.action.VIEW

com.yandex.payment.sdk.ui.payment.PaymentActivity

com.yandex.payment.sdk.ui.challenger.SbpChallengerActivity

com.yandex.payment.sdk.ui.bind.BindCardActivity

com.yandex.payment.sdk.ui.bind.BindGooglePayActivity

com.yandex.payment.sdk.ui.payment.sbp.BindSbpActivity

com.yandex.payment.sdk.ui.preselect.PreselectActivity

com.yandex.payment.sdk.ui.SplashActivity

com.yandex.payment.sdk.transportcards.ui.TransportCardsActivity

ru.kinopoisk.sdk.easylogin.internal.EasyLoginActivity

androidx.credentials.playservices.HiddenActivity

com.google.android.gms.auth.api.signin.internal.SignInHubActivity

com.android.billingclient.api.ProxyBillingActivity

com.google.android.gms.common.api.GoogleApiActivity

com.yandex.passport.internal.social.FbNativeSocialAuthActivity

com.yandex.passport.action.NATIVE_SOCIAL_FACEBOOK_AUTH

com.facebook.FacebookActivity

com.facebook.CustomTabMainActivity

com.facebook.CustomTabActivity

android.intent.action.VIEW

androidx.glance.appwidget.action.ActionTrampolineActivity

androidx.glance.appwidget.action.InvisibleActionTrampolineActivity

androidx.compose.ui.tooling.PreviewActivity

com.yandex.metrica.push.core.notification.MetricaPushDummyActivity

com.yandex.metrica.push.action.NOTIFICATION_ACTION

com.google.android.play.core.common.PlayCoreDialogWrapperActivity

ru.yandex.music.common.media.mediabrowser.MusicBrowserService

android.media.browse.MediaBrowserService

ru.yandex.music.common.service.player.MediaSessionService

ru.yandex.music.action.PLAY ru.yandex.music.action.PAUSE ru.yandex.music.action.SKIP ru.yandex.music.action.REWIND ru.yandex.music.action.STOP android.intent.action.MEDIA_BUTTON

ru.yandex.music.common.service.sync.SyncService

ru.yandex.music.services.RoutineService

ru.yandex.music.shortcuts.ShortcutsHelperOld

ru.yandex.music.common.service.player.WidgetPlaybackLauncher

ru.yandex.music.cover.upload.UploadCoverService

ru.yandex.music.emergency.EmergencyService

ru.yandex.music.push.update.YaMetricaMessagingService

com.google.firebase.MESSAGING_EVENT

com.yandex.music.shared.downloading.api.service.DownloadService

com.yandex.music.core.job.JobService

com.yandex.passport.internal.core.auth.AuthenticationService

android.accounts.AccountAuthenticator com.yandex.accounts.AccountAuthenticator

com.yandex.passport.internal.core.sync.SyncService

android.content.SyncAdapter

com.yandex.passport.internal.push.PassportPushRegistrationService

com.yandex.passport.internal.flags.experiments.FetchExperimentsService

com.google.firebase.messaging.FirebaseMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.firebase.components.ComponentDiscoveryService

androidx.credentials.playservices.CredentialProviderMetadataHolder

com.google.android.gms.auth.api.signin.RevocationBoundService

com.google.android.gms.cast.framework.ReconnectionService

io.appmetrica.analytics.internal.AppMetricaService

io.appmetrica.analytics.IAppMetricaService

com.google.firebase.sessions.SessionLifecycleService

androidx.glance.appwidget.GlanceRemoteViewsService

androidx.core.widget.RemoteViewsCompatService

androidx.work.impl.background.systemalarm.SystemAlarmService

androidx.work.impl.background.systemjob.SystemJobService

androidx.work.impl.foreground.SystemForegroundService

androidx.room.MultiInstanceInvalidationService

com.yandex.metrica.push.service.PushJobService

com.yandex.metrica.push.service.PushService

com.google.android.datatransport.runtime.backends.TransportBackendDiscovery

com.yandex.metrica.push.firebase.MetricaMessagingService

com.google.firebase.MESSAGING_EVENT

com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

ru.yandex.music.utils.LoginAccountsChangedReceiver

com.yandex.passport.client.ACCOUNT_REMOVED

ru.yandex.music.ui.widget.WidgetProvider

android.appwidget.action.APPWIDGET_UPDATE

ru.yandex.music.ui.widget.WidgetRecentlyRectangleReceiver

android.appwidget.action.APPWIDGET_UPDATE

ru.yandex.music.ui.widget.WidgetRectangleReceiver

android.appwidget.action.APPWIDGET_UPDATE

ru.yandex.music.ui.widget.WidgetSquareReceiver

android.appwidget.action.APPWIDGET_UPDATE

ru.yandex.music.common.service.player.DebugMediaButtonReceiver

android.intent.action.MEDIA_BUTTON

com.appsflyer.MultipleInstallBroadcastReceiver

com.android.vending.INSTALL_REFERRER

ru.yandex.music.push.BootCompletedReceiver

android.intent.action.BOOT_COMPLETED

ru.yandex.music.push.PushReportingDelegateReceiver

ru.yandex.music.push.LocalPushReceiver

ru.yandex.music.push.SilentPushReceiver

ru.yandex.music.action.ymp.SILENT_PUSH_RECEIVE

ru.yandex.music.widget.WidgetClickListener

com.yandex.passport.internal.core.announcing.AccountsChangedReceiver

android.accounts.LOGIN_ACCOUNTS_CHANGED com.yandex.accounts.LOGIN_ACCOUNTS_CHANGED

com.yandex.passport.internal.core.announcing.PackageRemovedReceiver

android.intent.action.PACKAGE_FULLY_REMOVED android.intent.action.PACKAGE_FULLY_REMOVED

com.yandex.passport.internal.smsretriever.SmsRetrieverReceiver

com.google.android.gms.auth.api.phone.SMS_RETRIEVED

com.yandex.passport.internal.sso.announcing.SsoAnnouncingReceiver

com.yandex.passport.ACTION_SSO_ANNOUNCEMENT

com.yandex.passport.internal.push.NotificationDismissedReceiver

com.yandex.passport.NOTIFICATION_DISMISS

com.google.firebase.iid.FirebaseInstanceIdReceiver

com.google.android.c2dm.intent.RECEIVE

com.google.android.gms.cast.framework.media.MediaIntentReceiver

com.facebook.CurrentAccessTokenExpirationBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGED

androidx.glance.appwidget.action.ActionCallbackBroadcastReceiver

androidx.glance.appwidget.UnmanagedSessionReceiver

androidx.glance.appwidget.MyPackageReplacedReceiver

android.intent.action.MY_PACKAGE_REPLACED

com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver

com.facebook.sdk.ACTION_CURRENT_AUTHENTICATION_TOKEN_CHANGED

androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy

android.intent.action.ACTION_POWER_CONNECTED android.intent.action.ACTION_POWER_DISCONNECTED

androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy

android.intent.action.BATTERY_OKAY android.intent.action.BATTERY_LOW

androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy

android.intent.action.DEVICE_STORAGE_LOW android.intent.action.DEVICE_STORAGE_OK

androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy

android.net.conn.CONNECTIVITY_CHANGE

androidx.work.impl.background.systemalarm.RescheduleReceiver

android.intent.action.BOOT_COMPLETED android.intent.action.TIME_SET android.intent.action.TIMEZONE_CHANGED

androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver

androidx.work.impl.background.systemalarm.UpdateProxies

androidx.work.impl.diagnostics.DiagnosticsReceiver

androidx.work.diagnostics.REQUEST_DIAGNOSTICS

com.yandex.metrica.push.core.notification.MetricaPushBroadcastReceiver

com.yandex.metrica.push.action.NOTIFICATION_ACTION

com.yandex.metrica.push.core.notification.MetricaPushNotificationStatusChangeHandler

android.app.action.APP_BLOCK_STATE_CHANGED android.app.action.NOTIFICATION_CHANNEL_BLOCK_STATE_CHANGED android.app.action.NOTIFICATION_CHANNEL_GROUP_BLOCK_STATE_CHANGED

com.yandex.metrica.push.core.notification.TtlBroadcastReceiver

com.yandex.metrica.push.action.EXPIRED_BY_TTL_ACTION

androidx.profileinstaller.ProfileInstallReceiver

androidx.profileinstaller.action.INSTALL_PROFILE androidx.profileinstaller.action.SKIP_FILE androidx.profileinstaller.action.SAVE_PROFILE androidx.profileinstaller.action.BENCHMARK_OPERATION

com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Android Permissions

ru-yandex-music-24025252-70606501-cff01c0f86ab34aec671db60bf63d120.apk

Permissions

android.permission.ACCESS_WIFI_STATE

android.permission.ACCESS_NETWORK_STATE

android.permission.INTERNET

android.permission.WAKE_LOCK

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.READ_MEDIA_AUDIO

android.permission.MODIFY_AUDIO_SETTINGS

com.android.vending.BILLING

android.permission.VIBRATE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.FOREGROUND_SERVICE

android.permission.POST_NOTIFICATIONS

android.permission.FOREGROUND_SERVICE_MEDIA_PLAYBACK

android.permission.FOREGROUND_SERVICE_DATA_SYNC

android.permission.BLUETOOTH

android.permission.GET_ACCOUNTS

android.permission.USE_CREDENTIALS

android.permission.MANAGE_ACCOUNTS

android.permission.AUTHENTICATE_ACCOUNTS

com.yandex.permission.READ_CREDENTIALS

com.yandex.permission.AM_COMMUNICATION

com.google.android.c2dm.permission.RECEIVE

android.permission.CHANGE_WIFI_MULTICAST_STATE

com.google.android.gms.permission.AD_ID

android.permission.ACCESS_ADSERVICES_ATTRIBUTION

com.samsung.android.mapsagent.permission.READ_APP_INFO

com.huawei.appmarket.service.commondata.permission.GET_COMMON_DATA

com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE

android.permission.RECORD_AUDIO