Resubmissions

17/05/2026, 13:47

260517-q3lrsahs6x

17/05/2026, 13:44

260517-q2bv7ahs4x6

17/05/2026, 13:42

260517-qz3k5ag17y6

17/05/2026, 13:38

260517-qxxbbsg14t6

17/05/2026, 13:35

260517-qvwa9acx3k6

Analysis

  • max time kernel
    6s
  • max time network
    32s
  • platform
    android-14_x64
  • resource
    android-34-x64-arm64-20260325.1-en
  • resource tags

    arch:arm64arch:x64image:android-34-x64-arm64-20260325.1-enlocale:en-usos:android-14-x64system
  • submitted
    17/05/2026, 13:44

General

  • Target
    fnaf_ransomware.apk
  • Size 50.6MB
  • Sample260517-q2bv7ahs4x
  • SHA256 4700a36d9f7b96d2eb04493c32db92358f8e217426c71f38021e49edc5ec0ecc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10

Malware Config

Signatures

  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

Processes

  • com.stingray.fnaf
    1⤵
    • Queries information about the current Wi-Fi connection
    PID:4478

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        gaClientId

        • Path /data/data/com.stingray.fnaf/files/gaClientId
        • Size 36B
        • SHA256 f7a49d77f50be78fd64fa2a15519bc404165bb523d43dcb012daccf3df1f060e
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/com.stingray.fnaf/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 f8046fb6523b685349e4ceaa5b63d5653f3d4d9bc0291dd9546056bfabd76205
        • MD5 SHA1 SHA512 TLSH

        androidx.work.workdb-journal

        • Path /data/data/com.stingray.fnaf/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 b4e67c91ad6bf8bb24d664edd363b9280d5d8be681440613e06e661c1cfdbd57
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/com.stingray.fnaf/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/com.stingray.fnaf/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 a82e0787f56c9aab1e533b55b0ff7a15209ffc4b95acf7b39657aa9d458ae678
        • MD5 SHA1 SHA512 SSDEEP TLSH

        androidx.work.workdb-wal

        • Path /data/data/com.stingray.fnaf/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 4cabfb88169ea03f662c26f3131f128702042923f49f87ab65b0996ae935b655
        • MD5 SHA1 SHA512 SSDEEP TLSH