d22179ea03e3def991f203790defff6527a92a377a1734bd114af6a71878a60a | Triage

Analysis

max time kernel
149s
max time network
153s
platform
android-11_x64
resource
android-x64-arm64-20240910-en
resource tags

arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
submitted
24/03/2025, 04:34

Sharing

Report Analysis Logs

General

Target

fnaf3stingray.apk
Size

557KB
MD5

30a398b39c9b159e81c7ffc1be41329d
SHA1

ad578bda21170dd102eac600cbbbe496c284dca1
SHA256

d22179ea03e3def991f203790defff6527a92a377a1734bd114af6a71878a60a
SHA512

2bab4c870eab096904f4db7682e5d9e8708aeb7d2112e2ea44752abcd359e14f6e2e16cc8f0c3ff56573b7d7d568248822bd0ab351abefa08f05e19372cf1d05
SSDEEP

12288:VuvjRH6+O//n3tKpSsM+1HA+kcMBfCb6vgdQPIwdgCir9k6amAs8U2b7m7+Xw:V8N6+ONjstgRl4bJLpCiBDRCUVx

Score

7^/10

collection impact privilege_escalation

Malware Config

Signatures

Reads the contacts stored on the device. 1 TTPs 1 IoCs

Contact List

description	ioc	Process
URI accessed for read	content://com.android.contacts/data/phones	com.fnaf3stingray

Tries to add a device administrator. 2 TTPs 1 IoCs

privilege_escalation impact

Device Administrator Permissions

Account Access Removal

description	ioc	Process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.fnaf3stingray

com.fnaf3stingray
1⤵
- Reads the contacts stored on the device.
- Tries to add a device administrator.
PID:4694

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

Device Administrator Permissions

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Protected User Data

Contact List

Command and Control

Exfiltration

Impact

Account Access Removal

Replay Monitor

Loading Replay Monitor...

Downloads