1c7b037c1a5439d4ab8ae9b79643a5a12c384491e2aa05dd5ca0a909ee302102.unknown
- SHA256 1c7b037c1a5439d4ab8ae9b79643a5a12c384491e2aa05dd5ca0a909ee302102
General
- Target 1c7b037c1a5439d4ab8ae9b79643a5a12c384491e2aa05dd5ca0a909ee302102.unknown
- Size 5.8MB
- Sample260701-3xtxesfz4k
- SHA256 1c7b037c1a5439d4ab8ae9b79643a5a12c384491e2aa05dd5ca0a909ee302102
- MD5 623838cfe83e1567658742850e49e59e
- SHA1 2b4536eff7bd9ec7d3edc54c3717cdac82562b3d
- SHA512 36297ba97533d1a8ebcc659334e73f156d0cee4ab755ff742bf566646a59642c681f64f9e176b51d8241da6f79d81d63cbd08e8fb30dc3c813a24f1b91888bfa
- SSDEEP 49152:AWDha5Tc51eXhiD7NK62HUgBkWHhzfp4dlgpvYA+gLaE/KQMUwrBMZwj/u:9DhauhXNK62JS7/e5AUwrzbu
- TLSH T1DA565B43FB53AD31D8DD433528B617557B31B2C6BB4363428A08E1B87EC76E5AA8C385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
konfety
C2
-
http://push.razkondronging.com/register?uid=
Signatures
- Family: Konfety
Konfety is an Android ad fraud malware that abuses the CaramelAds SDK by deploying the evil twin technique.
File Explorer
-
1c7b037c1a5439d4ab8ae9b79643a5a12c384491e2aa05dd5ca0a909ee302102.unknown.dex 5.8MB