project-27ef0.appspot.com

domain not resolving

Tracked by C2 Tracker · Whois queried never

Registration

Registrar: —
Registered: —
Expires: —

DNS

Resolves to: —
Nameservers: —
Status: —

Observed in malware

Family	Sample SHA-256	First seen
KoSpy	90ec29bafccc…	2025-02-07
KoSpy	fe1fb1eaf852…	2025-02-07

Attributed to: APT37 (ScarCruft)

Signing certificate

Subject CN: Android
Issuer CN: Android
Valid: 2023-08-27 → 2053-08-27
Fingerprint: 5b0ef498242da443f980db6fd43ef4168d0e6cae79170cba48ce8370af5c92df

Other samples signed with this certificate? That's a lead worth checking — but not proof of a shared operator, since signing keys (and the Android debug certificate in particular) are widely reused. See the certificate page for every sample signed with it.