Resubmissions

06/11/2026, 08:15

261106-j5r81svz7r10

06/11/2026, 08:14

261106-j49rnsbv2r10

06/11/2026, 08:10

261106-j26x1axzds10

11/05/2026, 11:31

260511-nmxg8sbx9r10

General

  • Target
    fnaf2_aptoide_elite1.origin.apk
  • Size 549KB
  • Sample261106-j49rnsbv2r
  • SHA256 d6c670c7a27105f082108d89c6d6b983bdeba6cef36d357b2c4c2bfbc4189aab
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Family: Wipelock

    Wipelock is an Android trojan with multiple capabilities, such as wiping data, reading and sending SMS messages without the victim's knowledge.

  • Wipelock Android payload 1 IoCs
  • Declares broadcast receivers with permission to handle system events 1 IoCs
  • Requests dangerous framework permissions 8 IoCs
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • fnaf2_aptoide_elite1.origin.apk
    .apk 549KB

fnaf2_aptoide_elite1.origin.apk

  • SHA256 d6c670c7a27105f082108d89c6d6b983bdeba6cef36d357b2c4c2bfbc4189aab
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Wipelock Android payload

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

File Signature issue

Digest
e5fd3f5e6ba8a7bbd7b5da95778df6ea5d3e9c3fc85c0f30690823427d4c297e
Digest Algorithm
sha256
Digest Matches
Trusted
Not trusted
Signer
CN=Android,OU=Android,O=Android,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c13616e64726f696440616e64726f69642e636f6d
com.scott.fnaf2

Android Permissions

fnaf2_aptoide_elite1.origin.apk

Permissions

android.permission.GET_TASKS

android.permission.READ_PHONE_STATE

android.permission.RECEIVE_SMS

android.permission.SEND_SMS

android.permission.READ_SMS

android.permission.WRITE_SMS

android.permission.READ_CONTACTS

android.permission.READ_EXTERNAL_STORAGE

android.permission.WRITE_EXTERNAL_STORAGE

android.permission.RECEIVE_BOOT_COMPLETED

android.permission.WRITE_SETTINGS

android.permission.WAKE_LOCK