76fa36d35e0e16b0ea416726…

sample

Tracked by C2 Tracker · indicators & metadata only, the APK itself is never published

Identification

SHA-256: 76fa36d35e0e16b0ea416726b0da2a66dfe7d7b35504cf6c475eac4cfa95fe3a
MD5: ec5a6f0e743f4b858aba9de96a33fb0c

Observed

Families: ZooPark
First seen: 2016-01-27

APK metadata

Summary

Type: Android · APK
Package: com.example.telegramgroups
Main activity: com.example.telegramgroups.MainActivity
Internal version: 1
Displayed version: 1.0
Min SDK: 8
Target SDK: 14

Signing certificate

Valid from: 2015-06-20 06:01:47
Valid to: 2045-06-12 06:01:47
Serial: 55f872cb
Thumbprint: b5c759aea06ead171113bf211fd350a15ebb143f
Subject: C:US, CN:Android Debug, O:Android
Issuer: C:US, CN:Android Debug, O:Android

Permissions (4)

android.permission.ACCESS_NETWORK_STATEandroid.permission.GET_ACCOUNTSandroid.permission.INTERNETandroid.permission.READ_CONTACTS

Activities (1)

com.example.telegramgroups.MainActivity

C2 configuration (1)

Every indicator extracted from this sample. One row per C2 — each links to its indicator page with Whois, DNS and certificate pivots.

Indicator	Type	Port	Scheme	Family	First seen
www.rhubarb2.com/telg/index.php	domain	—	http	ZooPark	2016-01-27

Signing certificate

Subject CN: Android Debug
Issuer CN: Android Debug
Fingerprint: 9fda4b172aed8ae576216134265f3b31f5d4506540fda893240234d4783f2c44

Relationships

Sample → C2 indicators, signing certificate (with every other sample signed by it) and family. Click a node for details, double-click to open its page.

Click a node to inspect it.