Extracted

• • Target
    Install.apk
  • Size 3.0MB
  • SHA256 3502fa570ada49eaeeaa4785bb1897ed91dfadaa76c5e8626c5b8e944d8f5f01
  • MD5 cb951b4667ba57b55c38cbec22ba55da
  • SHA1 77835e4a185cdef921f0dd6746b8b179b8dee7d2
  • SHA512 f1bd60238a65d7a5cd3747976d650fc5fa8696e2ccdc4e4504106566767ad8434e8e45c6263a3add66c0decb95eafe51debc2c35c113948a8e90a2bd767e0001
  • SSDEEP 98304:I1sMy5FdVTiPLJV02DxgvrqkVnNKiCmdY:I1sMy5FdliPLr0mgvrnVNKwY
  • TLSH
    T123E51216F7D4662FD4BE92316D980222A331DEA1BB826B873608337D5CF71980F653D6
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  collectioncredential_accessdefense_evasiondiscoveryevasionkonfetyimpactinfostealerpersistencerattrojan

  • Family: Konfety

    Konfety is an Android ad fraud malware that abuses the CaramelAds SDK by deploying the evil twin technique.

    trojaninfostealerratkonfety

  • Checks Android system properties for emulator presence.

    defense_evasion

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Queries information about active data network

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1behavioral2behavioral3behavioral4behavioral5behavioral6