C2Tracker

a9378a5469319faffc48f3aa…

sample

Tracked by C2 Tracker · indicators & metadata only, the APK itself is never published

Identification

SHA-256
a9378a5469319faffc48f3aa70f5b352d5acb7d361c5177a9aac90d9c58bb628
MD5
a7213981f02648a9260e69b8eaac2f3c

Observed

Families
StrongPity
First seen
–

APK metadata

Summary

Type
Android · APK
Package
net.cybertik.wifiplus
Main activity
net.cybertik.wifiplus.LauncherActivity
Internal version
1
Displayed version
2.1
Min SDK
22
Target SDK
22

Signing certificate

Valid from
2020-04-23 12:16:13
Valid to
2045-04-17 12:16:13
Serial
6d1b6d5c
Thumbprint
4f7bc5c94f05a9e9f0b861c2721ef02aa7f2f112
Subject
C:JA, CN:Levin Levinge, L:Tokyo, O:Somolo Inc, ST:Tokyo, OU:Sales
Issuer
C:JA, CN:Levin Levinge, L:Tokyo, O:Somolo Inc, ST:Tokyo, OU:Sales

Permissions (20)

android.permission.ACCESS_BACKGROUND_LOCATIONandroid.permission.ACCESS_COARSE_LOCATIONandroid.permission.ACCESS_FINE_LOCATIONandroid.permission.ACCESS_NETWORK_STATEandroid.permission.ACCESS_WIFI_STATEandroid.permission.CAMERAandroid.permission.CHANGE_WIFI_STATEandroid.permission.FLASHLIGHTandroid.permission.GET_ACCOUNTSandroid.permission.INTERNETandroid.permission.READ_CALL_LOGandroid.permission.READ_CONTACTSandroid.permission.READ_EXTERNAL_STORAGEandroid.permission.READ_PHONE_NUMBERSandroid.permission.READ_PHONE_STATEandroid.permission.READ_SMSandroid.permission.RECEIVE_BOOT_COMPLETEDandroid.permission.VIBRATEandroid.permission.WAKE_LOCKandroid.permission.WRITE_EXTERNAL_STORAGE

Activities (10)

  • com.google.zxing.client.android.CaptureActivity
  • com.google.zxing.client.android.HelpActivity
  • com.google.zxing.client.android.encode.EncodeActivity
  • com.google.zxing.client.androidlegacy.CaptureActivity
  • com.google.zxing.client.androidlegacy.HelpActivity
  • com.google.zxing.client.androidlegacy.encode.EncodeActivity
  • net.cybertik.wifiplus.LauncherActivity
  • net.cybertik.wifiplus.MainActivity
  • net.cybertik.wifiplus.ScanQrActivity
  • net.cybertik.wifiplus.StatusActivity

Services (2)

  • net.cybertik.wifiplus.MyService
  • net.cybertik.wifiplus.NetworkStatusService

Receivers (4)

  • net.cybertik.wifiplus.BootReceiver
  • net.cybertik.wifiplus.ConnectivityReceiver
  • net.cybertik.wifiplus.Receiver
  • net.cybertik.wifiplus.UPH

Providers (1)

  • com.squareup.picasso.PicassoProvider

Intent filters — actions

android.intent.action.BATTERY_CHANGEDandroid.intent.action.BATTERY_LOWandroid.intent.action.BOOT_COMPLETEDandroid.intent.action.USER_PRESENTandroid.net.conn.CONNECTIVITY_CHANGE

C2 configuration (1)

Every indicator extracted from this sample. One row per C2 — each links to its indicator page with Whois, DNS and certificate pivots.

IndicatorTypePortSchemeFamilyFirst seen
networktopologymaps.com/user/ domain — https StrongPity –

Signing certificate

Subject CN
Levin Levinge
Issuer CN
Levin Levinge
Fingerprint
e90a429e9ba3d10985d47ad71511ffa5e296983c74267f28a88fa6a77d80ba75

Relationships

Sample → C2 indicators, signing certificate (with every other sample signed by it) and family. Click a node for details, double-click to open its page.

Click a node to inspect it.