Resubmissions
17/05/2026, 13:47
260517-q3lrsahs6x17/05/2026, 13:44
260517-q2bv7ahs4x617/05/2026, 13:42
260517-qz3k5ag17y617/05/2026, 13:38
260517-qxxbbsg14t617/05/2026, 13:35
260517-qvwa9acx3k6Analysis
- max time kernel
6s - max time network
32s - platform
android-14_x64 - resource
android-34-x64-arm64-20260325.1-en - resource tags
arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system - submitted
17/05/2026, 13:44
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
fnaf_ransomware.apk
Resource
android-34-x64-arm64-20260325.1-en
1 signatures
30 seconds
Behavioral task
behavioral2
Sample
fnaf_ransomware.apk
Resource
debian12-armhf-20260513-en
0 signatures
30 seconds
Behavioral task
behavioral3
Sample
fnaf_ransomware.apk
Resource
debian9-mipsbe-20260513-en
0 signatures
30 seconds
General
- Target fnaf_ransomware.apk
- Size 50.6MB
- Sample260517-q2bv7ahs4x
- SHA256 4700a36d9f7b96d2eb04493c32db92358f8e217426c71f38021e49edc5ec0ecc
- MD5 3103826870113385d9d4c6f5a35e5ec0
- SHA1 622f839ad68c65fa38e134947886713b7115b9d3
- SHA512 994df068090d2ea3215d008ba96edf6ae668f0c4e297985fa9c28de02a4f73eb8eabe1bbcd0c170a11cd8824191edd82086ac901b732f935741b8c763997e918
- SSDEEP 786432:YXLfJjwayWil0RWe/wWdPM1OOpZ5ElvkyNqZCeF8O1MNlJ1ozJx:yLhk1le/bE1fpPEPqUQ9wJ1ozf
- TLSH T134C7129AF68CDE96C4F2573345BA6236A10F4D219783D68369103338B9B35F8CB49BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
description ioc Process Framework service call android.net.wifi.IWifiManager.getConnectionInfo com.stingray.fnaf
Processes
Network
MITRE ATT&CK Mobile v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.stingray.fnaf/files/gaClientId
- Size 36B
- SHA256 f7a49d77f50be78fd64fa2a15519bc404165bb523d43dcb012daccf3df1f060e
- MD5 07d1480946141b80d3913e0572ebd664
- SHA1 9f3e4cd7a20bf26ec7fe6ac83241c5466c8dcc6c
- SHA512 59571faa8068b07e6cf96fb4518cee0704e98b56e9e955fe1dcf72d1f750c7b11b15c60f7f63452f2ab87be05999060a89e43177f901bb03518669737fd01368
- MD5 SHA1 SHA512
- Path /data/data/com.stingray.fnaf/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
- MD5 19e5c2bf2a99d61bc5ae4cc8952d1bb0
- SHA1 34d540bf135454e98068819b42b84411fdd62dbf
- SHA512 454bce38a46107d5a4c64d8757475da9ff6ee0025fa1a8212e613d787927cb209217c655ae4ec7adf884c723e5683f473e21df0a606cd40ada4245f8daf9c3ce
- TLSH T10C810454D34000F1D0D407F354D1130D0F07D1D4D5510F0315070041CC415470C74FC5
- MD5 SHA1 SHA512 TLSH
- Path /data/data/com.stingray.fnaf/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 b4e67c91ad6bf8bb24d664edd363b9280d5d8be681440613e06e661c1cfdbd57
- MD5 4bbc830989e1fd8f6379bc3bc679abfc
- SHA1 64069502b9445ace1541897ea7842f642c8a250b
- SHA512 fdc08f74f49cce52f428d333a3747c539dea75ef098d030eebb7708ea74ea36337dd00fa8c07b2349fb5026e2c997073e6bce88025a97cfff38c9cb5c58f09cd
- MD5 SHA1 SHA512
- Path /data/data/com.stingray.fnaf/no_backup/androidx.work.workdb-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.stingray.fnaf/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 a82e0787f56c9aab1e533b55b0ff7a15209ffc4b95acf7b39657aa9d458ae678
- MD5 0a82eba370aa69623251cb2a70ba9a27
- SHA1 b831b3eeaaf2c7e945eecf290bf0edc3e529c732
- SHA512 33ced4dc6dd534819c66628161bcabaf3712b9e9c287734cf1c8b41038baa210c7a9a2dcd2a3cc27852b5104d76d1ff07701d14ae53b9029568a4a64a58e71e3
- SSDEEP 12:KaWy8vXzdIRmBEyPbP/8+OlyhmIiKiOw2:KaWZPz9GSP/8+KaZw2
- TLSH T1DB72C2A493C01A53D589333264D4E3520F71161AD332CBCB52952E20AC413CDB650D0C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path /data/data/com.stingray.fnaf/no_backup/androidx.work.workdb-wal
- Size 108KB
- SHA256 4cabfb88169ea03f662c26f3131f128702042923f49f87ab65b0996ae935b655
- MD5 a3cebdafc4c98103a817c6d58893f657
- SHA1 d8be63af9d3406419a29f0f98be818e0d95dd158
- SHA512 6b98134de97f9b0e5fad3a0d552a90a58b6bf3bedb7b8e4933af4a8a7ab22574e045efaeff1aa5882a5fa749904eb5ff7d1cd94f2c4ac6bd00f986af87ebaf09
- SSDEEP 96:HkZ6+hdjnHtDRMpf8UzS5+TD8q0ExPD+CT/4jd:EVdjnHt9Mpf8UzS5+TD8q0E5v/4J
- TLSH T184B3344E0F592501C499B4F0E5E01FF27E7E452ED793E3D169910175AEC2920EE29CFA
- MD5 SHA1 SHA512 SSDEEP TLSH