Extracted

• • Target
    Install-3.apk
  • Size 3.9MB
  • SHA256 6bc03e805f74d131ddf17394b586ec302db425a7679bc33a329db257375ecfe3
  • MD5 40778f14a5f3890a51c7ca4e1a1b8300
  • SHA1 d8731726797eb9c96b8e3735aa3bba3719726d89
  • SHA512 d4b6d96d92600c894e355e9d8490a03e05d08e5c67bd6ca542b7e28da8266bda5bde463c1e78bd7d332243f76ace5d3ccdb9ecccf3ed40ad948e64cb5a91d48f
  • SSDEEP 98304:kKIdMnxwXQIRkXMyxTr3DF8Z0V4E5QbpG9TPMdS:kKId0KAIRG3xTN8Z0za89MS
  • TLSH
    T1A8162302F3E8AA27D4B6C5751A8593750A26FE28DE02774B30047BBD2CB7AD84F947D1
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  defense_evasiondiscoveryevasionkonfetyinfostealerpersistencerattrojancollectioncredential_accessimpact

  • Family: Konfety

    Konfety is an Android ad fraud malware that abuses the CaramelAds SDK by deploying the evil twin technique.

    trojaninfostealerratkonfety

  • Loads dropped Dex/Jar

    Runs executable file dropped to the device during analysis.

    evasion

  • Obtains sensitive information copied to the device clipboard

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact

  • Makes use of the framework's foreground persistence service

    Application may abuse the framework's foreground service to continue running in the foreground.

    defense_evasionpersistence

  • Queries information about active data network

    discovery

  • Queries the mobile country code (MCC)

    discovery

  • Reads information about phone network operator.

    discovery
  behavioral1behavioral2behavioral3