7d73dd991ec6f750db18528c01845a8b15086105a8181b30b344a012e1360f82.bin
- SHA256 7d73dd991ec6f750db18528c01845a8b15086105a8181b30b344a012e1360f82
General
- Target 7d73dd991ec6f750db18528c01845a8b15086105a8181b30b344a012e1360f82.bin
- Size 2.2MB
- Sample260701-xea4pset6s
- SHA256 7d73dd991ec6f750db18528c01845a8b15086105a8181b30b344a012e1360f82
- MD5 556c9c808ca6ea3958c57f1e131d1adf
- SHA1 d7d46e9e790d42bfbd8ba189a0b84ebf13536a3c
- SHA512 4a30662d99231b364894efb0915ddcd313df13c2963e041c5116e348a7d2f037367c5d8a5111ce6273ab99619bfee7b2a0c91fa713f4a9150b33266220c6c7b5
- SSDEEP 49152:MfztCAsrqc+Mtdhbwhr3UPN54aKRmWJEbsHzuDMk0OixskIMLyK4e:AxCAsRdtTwhQN5GRqbWy12rIMLyK4e
- TLSH T194B5332F6E6DA38158A8DDC18CA77BAA16D0E4FB5C45C09A17279243375CE3DC872933
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
konfety
C2
-
http://push.razkondronging.com/register?uid=
Signatures
- Family: Konfety
Konfety is an Android ad fraud malware that abuses the CaramelAds SDK by deploying the evil twin technique.
File Explorer
-
7d73dd991ec6f750db18528c01845a8b15086105a8181b30b344a012e1360f82.bin.zip 2.2MB
-
4407-0.dex.dex 5.8MB
4407-0.dex
- SHA256 0e1e71b819ea1645bd2930ff15d6a9c13c882647c1029dce6d31cdc0f6029ec7
- MD5 fcdc01484cd0ea8ece7a7753137fed60
- SHA1 28896d233a9eea05dab4b72dbbf12822eecda811
- SHA512 93ddf6c61395559c80d265ef30f9acf69594d9d6f03b6f1a451e571c3f93f1c4e0f12cdf2e2a7244408bab856bc5e7c7fd57a6b385b4d61bd9cd74ccf703a1e5
- SSDEEP 49152:YkJjUFiZzhK62Nm2bK0B1jBALbGvF5lkpuHCEZJYWKYYsrPXzHRd2Io:Ya6QK62QgPfHgq+Io
- TLSH T14E566C46F647CD32EC9D47751CF207606732A296E7C363161828EA7CAEC32E65EC96D0
- MD5 SHA1 SHA512 SSDEEP TLSH