Extracted

• • Target
    Install.apk
  • Size 6.2MB
  • SHA256 1ae72c2f58378f765357c4d42ba7352082beee1651923009e79909415a8fbdad
  • MD5 d99808c57617ae31be0129629c445a74
  • SHA1 ae2551b932d2c395379743c878b4383ac86be8d9
  • SHA512 c9679dc7b33f04c67f80bcf8faafa9c906f096aa35a20619a680c004aced85fc4b77f2687c502cebcf2ed68c193f13c6965d807c702b0badc4a73e7f162b90ad
  • SSDEEP 196608:MzsfTwxRpa4Xpsy9LwS96yE0J8+gToe654gK9LI:VfrcxP6Qtg8eAK90
  • TLSH
    T125662342F6E49E2ADCB5C232559453356636EE18DD02AB4F384833BE6CB39C88F917D1
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryevasionkonfetyinfostealerpersistencerattrojancollectioncredential_accessimpact

  • Family: Konfety

    Konfety is an Android ad fraud malware that abuses the CaramelAds SDK by deploying the evil twin technique.

    trojaninfostealerratkonfety

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Queries information about active data network

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1behavioral2behavioral3