C2Tracker

596257ef017b02ba6961869d…

sample

Tracked by C2 Tracker · indicators & metadata only, the APK itself is never published

Identification

SHA-256
596257ef017b02ba6961869d78a2317500a45f00c76682a22bbdbd3391857b5d
MD5
b1718f942abbbbd1a1961556ed04895c

Observed

Families
StrongPity
First seen
–

APK metadata

Summary

Type
Android · APK
Package
com.snaptube.premiumplus
Main activity
com.snaptube.premiumplus.LauncherActivity
Internal version
4771610
Displayed version
4.77.0.4771610
Min SDK
22
Target SDK
22

Signing certificate

Valid from
2019-11-14 15:02:52
Valid to
2044-11-07 15:02:52
Serial
5754eb9c
Thumbprint
3898ff94bb60c7f7a3a8b7c771e573e8396bf274
Subject
C:UK, CN:Mike Hullman, L:London, O:Hull Mob, ST:London, OU:Mob Dev
Issuer
C:UK, CN:Mike Hullman, L:London, O:Hull Mob, ST:London, OU:Mob Dev

Permissions (23)

android.permission.ACCESS_COARSE_LOCATIONandroid.permission.ACCESS_FINE_LOCATIONandroid.permission.ACCESS_NETWORK_STATEandroid.permission.ACCESS_WIFI_STATEandroid.permission.CHANGE_WIFI_STATEandroid.permission.GET_ACCOUNTSandroid.permission.INTERNETandroid.permission.READ_CALL_LOGandroid.permission.READ_CONTACTSandroid.permission.READ_EXTERNAL_STORAGEandroid.permission.READ_PHONE_STATEandroid.permission.READ_SMSandroid.permission.RECEIVE_BOOT_COMPLETEDandroid.permission.SYSTEM_ALERT_WINDOWandroid.permission.VIBRATEandroid.permission.WAKE_LOCKandroid.permission.WRITE_EXTERNAL_STORAGEcom.android.launcher.permission.CREATE_SHORTCUTcom.android.launcher.permission.INSTALL_SHORTCUTcom.android.launcher.permission.UNINSTALL_SHORTCUTcom.google.android.c2dm.permission.RECEIVEcom.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICEcom.google.android.providers.gsf.permission.READ_GSERVICES

Activities (74)

  • com.facebook.CustomTabActivity
  • com.facebook.CustomTabMainActivity
  • com.facebook.FacebookActivity
  • com.google.android.gms.auth.api.signin.internal.SignInHubActivity
  • com.google.android.gms.common.api.GoogleApiActivity
  • com.snaptube.ads.AdsBrowser
  • com.snaptube.ads.interstitial.NativeInterstitialActivity
  • com.snaptube.ads.interstitial.pubnative.PubNativeInterstitialActivity
  • com.snaptube.premiumplus.LauncherActivity
  • com.snaptube.premiumplus.activity.ActionSendDispatchActivity
  • com.snaptube.premiumplus.activity.BatchVideoSelectActivity
  • com.snaptube.premiumplus.activity.ChooseDownloadPathActivity
  • com.snaptube.premiumplus.activity.ChooseFormatActivity
  • com.snaptube.premiumplus.activity.ChooseInsFormatActivity
  • com.snaptube.premiumplus.activity.CleanDownLoadActivity
  • com.snaptube.premiumplus.activity.CleanSettingActivity
  • com.snaptube.premiumplus.activity.CommentDetailActivity
  • com.snaptube.premiumplus.activity.CommonMixedListActivity
  • com.snaptube.premiumplus.activity.CommonMultiTabActivity
  • com.snaptube.premiumplus.activity.ContentLocationActivity
  • com.snaptube.premiumplus.activity.ContentSettingActivity
  • com.snaptube.premiumplus.activity.CreatorProfileActivity
  • com.snaptube.premiumplus.activity.CreditsActivity
  • com.snaptube.premiumplus.activity.DeepLinkActivity
  • com.snaptube.premiumplus.activity.DownloadRecommendedVideoActivity
  • com.snaptube.premiumplus.activity.DragonActivity
  • com.snaptube.premiumplus.activity.ExoVideoDetailedActivity
  • com.snaptube.premiumplus.activity.ExploreActivity
  • com.snaptube.premiumplus.activity.FeedVideoPlaybackActivity
  • com.snaptube.premiumplus.activity.FeedbackActivity
  • com.snaptube.premiumplus.activity.FeedbackWebActivity
  • com.snaptube.premiumplus.activity.HashTagActivity
  • com.snaptube.premiumplus.activity.InstallGuideOverlayActivity
  • com.snaptube.premiumplus.activity.LandingActivity
  • com.snaptube.premiumplus.activity.LanguageListActivity
  • com.snaptube.premiumplus.activity.ListActivity
  • com.snaptube.premiumplus.activity.LoginActivity
  • com.snaptube.premiumplus.activity.MultiSelectActivity
  • com.snaptube.premiumplus.activity.MusicPlayerFullScreenActivity
  • com.snaptube.premiumplus.activity.MyThingsActivity
  • com.snaptube.premiumplus.activity.NightModeSettingActivity
  • com.snaptube.premiumplus.activity.NotificationSettingActivity
  • com.snaptube.premiumplus.activity.PlayerGuideActivity
  • com.snaptube.premiumplus.activity.STDuplicatedGuideActivity
  • com.snaptube.premiumplus.activity.SettingActivity
  • com.snaptube.premiumplus.activity.SplashActivity
  • com.snaptube.premiumplus.activity.StandardMixedListActivity
  • com.snaptube.premiumplus.activity.TranslucentMixedListActivity
  • com.snaptube.premiumplus.activity.UserLovedActivity
  • com.snaptube.premiumplus.activity.UserProfileActivity
  • com.snaptube.premiumplus.activity.UserProfileEditActivity
  • com.snaptube.premiumplus.activity.VideoPlaybackActivity
  • com.snaptube.premiumplus.activity.VideoPlayerFullScreenActivity
  • com.snaptube.premiumplus.activity.VideoWebViewActivity
  • com.snaptube.premiumplus.activity.YouTubeLoginActivity
  • com.snaptube.premiumplus.activity.YouTubeUserProfileActivity
  • com.snaptube.premiumplus.activity.YouTubeVideoListActivity
  • com.snaptube.premiumplus.activity.YoutubeVideoWebViewActivity
  • com.snaptube.premiumplus.ads.locker.musicplayer.LockerMusicPlayerActivity
  • com.snaptube.premiumplus.dialog.WindowPermissionActivity
  • com.snaptube.premiumplus.movie.ui.detail.MovieDetailActivity
  • com.snaptube.premiumplus.movie.ui.filter.MovieSearchFilterActivity
  • com.snaptube.premiumplus.moviefiles.MovieFilesActivity
  • com.snaptube.premiumplus.search.HotQueriesActivity
  • com.snaptube.premiumplus.search.MixedSearchActivity
  • com.snaptube.premiumplus.sites.BookmarkActivity
  • com.snaptube.premiumplus.sites.ReportSiteActivity
  • com.snaptube.premiumplus.sites.SpeedDialActivity
  • com.snaptube.premiumplus.subscription.SubscriptionListActivity
  • com.snaptube.premiumplus.webview.HistoryActivity
  • com.snaptube.premiumplus.webview.tab.WebTabsActivity
  • com.snaptube.premiumplus.whatsapp.WhatsAppStatusActivity
  • com.snaptube.premiumplus.whatsapp.gallery.GalleryActivity
  • com.snaptube.premiumplus.youtube.PlaylistVideoActivity

Services (26)

  • com.google.android.gms.analytics.AnalyticsService
  • com.google.android.gms.analytics.CampaignTrackingService
  • com.google.android.gms.auth.api.signin.RevocationBoundService
  • com.google.android.gms.measurement.AppMeasurementJobService
  • com.google.android.gms.measurement.AppMeasurementService
  • com.google.firebase.components.ComponentDiscoveryService
  • com.google.firebase.iid.FirebaseInstanceIdService
  • com.google.firebase.messaging.FirebaseMessagingService
  • com.snaptube.ads.daemon.RebirthJobService
  • com.snaptube.ads.guardian.service.GuardianService
  • com.snaptube.ads.keeper.KeeperService
  • com.snaptube.ads.keeper.StubService
  • com.snaptube.geo.LocationFetchService
  • com.snaptube.postdectector.service.CreatorPostDetectorService
  • com.snaptube.premiumplus.ClipMonitor.ClipMonitorService
  • com.snaptube.premiumplus.NetworkStatusService
  • com.snaptube.premiumplus.alarm.AlarmService
  • com.snaptube.premiumplus.background.BackgroundService
  • com.snaptube.premiumplus.fcm.FcmInstanceIdService
  • com.snaptube.premiumplus.fcm.FcmService
  • com.snaptube.premiumplus.playback.window.WindowPlayService
  • com.snaptube.premiumplus.playback.window.WindowPlaybackService
  • com.snaptube.premiumplus.push.PushPreloadService
  • com.snaptube.premiumplus.push.parser.PushEntityParseService
  • com.snaptube.premiumplus.selfupgrade.incremental_upgrade.PatchService
  • com.snaptube.premiumplus.service.PlayerService

Receivers (26)

  • com.facebook.CampaignTrackingReceiver
  • com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
  • com.google.android.gms.analytics.AnalyticsReceiver
  • com.google.android.gms.measurement.AppMeasurementInstallReferrerReceiver
  • com.google.android.gms.measurement.AppMeasurementReceiver
  • com.google.firebase.iid.FirebaseInstanceIdReceiver
  • com.snaptube.ads.guardian.receiver.InstallEventReceiver
  • com.snaptube.ads.infomobi.receiver.InitReceiver
  • com.snaptube.ads.infomobi.receiver.ReceiverDelegate
  • com.snaptube.ads.keeper.KeeperReceiver
  • com.snaptube.ads.keeper.StubReceiver
  • com.snaptube.ads.selfbuild.request.verify.AppInstalledReceiver
  • com.snaptube.plugin.ads.AdPluginInitReceiver
  • com.snaptube.premiumplus.Receiver
  • com.snaptube.premiumplus.UPH
  • com.snaptube.premiumplus.onlineconfig.SnapTubeOnlineConfigScheduleReceiver
  • com.snaptube.premiumplus.receiver.AppFirstStartReceiver
  • com.snaptube.premiumplus.receiver.ConnectivityChangedReceiver
  • com.snaptube.premiumplus.receiver.GooglePlayRefReceiver
  • com.snaptube.premiumplus.receiver.MediaMountReceiver
  • com.snaptube.premiumplus.receiver.MediaScannerReceiver
  • com.snaptube.premiumplus.receiver.MusicIntentReceiver
  • com.snaptube.premiumplus.selfupgrade.CheckSelfUpgradeReceiver
  • com.snaptube.taskManager.notification.TaskReceiver
  • com.snaptube.titan.carrier.CarrierReceiver
  • com.stumbler.stander.config.StanderReceiver

Providers (10)

  • android.arch.lifecycle.ProcessLifecycleOwnerInitializer
  • com.crashlytics.android.CrashlyticsInitProvider
  • com.dywx.premium.core.udid.impl.UDIDProvider
  • com.facebook.internal.FacebookInitProvider
  • com.google.firebase.perf.provider.FirebasePerfProvider
  • com.google.firebase.provider.FirebaseInitProvider
  • com.sensorsdata.analytics.android.sdk.SensorsDataContentProvider
  • com.snaptube.premiumplus.provider.SnaptubeExportedProvider
  • com.snaptube.premiumplus.share.GenericFileProvider
  • com.snaptube.taskManager.provider.SnaptubeContentProvider

Intent filters — actions

android.intent.action.ACTION_POWER_CONNECTEDandroid.intent.action.ACTION_POWER_DISCONNECTEDandroid.intent.action.BATTERY_CHANGEDandroid.intent.action.BATTERY_LOWandroid.intent.action.BOOT_COMPLETEDandroid.intent.action.DOWNLOAD_COMPLETEandroid.intent.action.MEDIA_BUTTONandroid.intent.action.MEDIA_MOUNTEDandroid.intent.action.MEDIA_SCANNER_FINISHEDandroid.intent.action.MEDIA_SCANNER_SCAN_FILEandroid.intent.action.MEDIA_SCANNER_STARTEDandroid.intent.action.MEDIA_UNMOUNTEDandroid.intent.action.PACKAGE_ADDEDandroid.intent.action.PACKAGE_CHANGEDandroid.intent.action.PACKAGE_FIRST_LAUNCHandroid.intent.action.PACKAGE_REMOVEDandroid.intent.action.PACKAGE_REPLACEDandroid.intent.action.USER_PRESENTandroid.net.conn.CONNECTIVITY_CHANGEandroid.net.wifi.supplicant.CONNECTION_CHANGEcom.android.vending.INSTALL_REFERRERcom.facebook.sdk.ACTION_CURRENT_ACCESS_TOKEN_CHANGEDcom.google.android.c2dm.intent.RECEIVEcom.google.android.gms.analytics.ANALYTICS_DISPATCHcom.google.firebase.INSTANCE_ID_EVENTcom.google.firebase.MESSAGING_EVENTcom.snaptbue.ads.PLUGIN_INITcom.snaptube.ads.infomobi.TRY_INITcom.snaptube.geo.ACTION_FETCHcom.snaptube.premium.APP_FIRST_STARTphoenix.intent.action.CHECK_ONLINE_CONFIGphoenix.intent.action.CHECK_SELF_UPGRADEphoenix.intent.action.DOWNLOAD_HIDEphoenix.intent.action.DOWNLOAD_LISTphoenix.intent.action.DOWNLOAD_LIST_HIDEphoenix.intent.action.DOWNLOAD_OPENphoenix.intent.action.DOWNLOAD_OPEN_SELF_UPGRADE_APK

C2 configuration (1)

Every indicator extracted from this sample. One row per C2 — each links to its indicator page with Whois, DNS and certificate pivots.

IndicatorTypePortSchemeFamilyFirst seen
www.upeg-system-app.com/ServiceRApp/user/ domain — https StrongPity –

Signing certificate

Subject CN
Mike Hullman
Issuer CN
Mike Hullman
Fingerprint
ba4e6d93075aec6aaf68d23a8c860505092396d107776be98d119172cc6351b7

Relationships

Sample → C2 indicators, signing certificate (with every other sample signed by it) and family. Click a node for details, double-click to open its page.

Click a node to inspect it.