C2Tracker

141b76bcd7a6ae41feccb263…

sample

Tracked by C2 Tracker · indicators & metadata only, the APK itself is never published

Identification

SHA-256
141b76bcd7a6ae41feccb263b0bda7879eca2f42974e124acccb38810cee52c7
MD5
232bd3dde6914db0a3dbfc21ed178887

Observed

Families
ZooPark
First seen
2018-05-08

APK metadata

Summary

Type
Android · APK
Package
com.app.entekhab10
Main activity
com.app.entekhab10.MainActivity
Internal version
1
Displayed version
1.0
Min SDK
8
Target SDK
14

Signing certificate

Valid from
2015-06-20 06:01:47
Valid to
2045-06-12 06:01:47
Serial
55f872cb
Thumbprint
b5c759aea06ead171113bf211fd350a15ebb143f
Subject
C:US, CN:Android Debug, O:Android
Issuer
C:US, CN:Android Debug, O:Android

Permissions (4)

android.permission.ACCESS_NETWORK_STATEandroid.permission.GET_ACCOUNTSandroid.permission.INTERNETandroid.permission.READ_CONTACTS

Activities (4)

  • com.app.entekhab10.AmarActivity
  • com.app.entekhab10.DavatActivity
  • com.app.entekhab10.MainActivity
  • com.app.entekhab10.SelectSActivity

C2 configuration (1)

Every indicator extracted from this sample. One row per C2 — each links to its indicator page with Whois, DNS and certificate pivots.

IndicatorTypePortSchemeFamilyFirst seen
www.rhubarb2.com/ent/index.php domain — http ZooPark 2018-05-08

Signing certificate

Subject CN
Android Debug
Issuer CN
Android Debug
Fingerprint
9fda4b172aed8ae576216134265f3b31f5d4506540fda893240234d4783f2c44

Relationships

Sample → C2 indicators, signing certificate (with every other sample signed by it) and family. Click a node for details, double-click to open its page.

Click a node to inspect it.