Analysis
-
max time kernel
114s -
max time network
295s -
platform
android_x64 -
resource
android-33-x64-arm64-20240221-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240221-enlocale:en-usos:android-13-x64system -
submitted
24/02/2024, 17:09
Static task
static1
Behavioral task
behavioral1
Sample
ftblcanapp.apk
Resource
android-33-x64-arm64-20240221-en
General
-
Target
ftblcanapp.apk
-
Size
28.5MB
-
MD5
31635d03393ec2fd0b7a6f671a146009
-
SHA1
874c07f161b33cdd9904fa642456fe0e0375fd69
-
SHA256
960caac1cc59e73774523d0d2439717940bfa8e1331ae41cae4a3439f70c382f
-
SHA512
9bf40fe7a5ded91fc464d571d84b373d2d5195ab4e69c1960fa125ae70b2bb6ba8848e35140f67c39bf891c658a72a71bf6942f16be4b102996f72c9c31c3d00
-
SSDEEP
786432:vkK+ZFqSxJnoX3CsBKNAM/GEDLNKMSVo/sP5haLlpw:d+ZF7noXmp+cLw+k+Lly
Malware Config
Signatures
-
Checks Android system properties for emulator presence. 1 TTPs 6 IoCs
description ioc Process Accessed system property key: ro.bootmode com.ftblcanapp Accessed system property key: ro.hardware com.ftblcanapp Accessed system property key: ro.product.device com.ftblcanapp Accessed system property key: ro.product.model com.ftblcanapp Accessed system property key: ro.product.name com.ftblcanapp Accessed system property key: ro.bootloader com.ftblcanapp -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/qemu_pipe com.ftblcanapp /dev/socket/qemud com.ftblcanapp -
Loads dropped Dex/Jar 5 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.ftblcanapp/[email protected] 4323 com.ftblcanapp /system_ext/framework/androidx.window.extensions.jar 4323 com.ftblcanapp /system_ext/framework/androidx.window.extensions.jar 4323 com.ftblcanapp /system_ext/framework/androidx.window.sidecar.jar 4323 com.ftblcanapp /system_ext/framework/androidx.window.sidecar.jar 4323 com.ftblcanapp -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.ftblcanapp
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5edb655088d1ed9f33f9d0d499b7a3ef5
SHA1565c4f4e43179dbfc285cd6331dc8ac75a901af8
SHA256bb9e45aad35b43e895393e7a66e4ead6a5f728f90b7627e3c741d391bf65d4f9
SHA51298cbf923880de82921c38973fbc6d711dc39884428d1eb4ead33658a5a7f163734e5121823d5b043ca44554d19c5b6f966674ac7291513944a94cec97d5be599
-
Filesize
512B
MD5d0671fabcc2894af6072ac362c552b11
SHA1af8853f14c04620012502a914ae5eec8e70b65b2
SHA256277f14195cbaae8a422b13aee54f0b6aa7fb244c071310b5838de0da7e1e7881
SHA512662507e9ea155963f853ca1b7bda3a4925af59107df0cdae259d749f4553a3e602c33197908c7d8a8d663a1583b545872fd1099e8bf7ac65feffe89b71c96204
-
Filesize
8KB
MD50665bbcc5196de7453f2ece8cbfe171a
SHA16c065e9e5754bdacb6846fa77a754a7f4c265835
SHA2561a9b5d4781c3ae0dd784801964286c7b8ca5d0dba5af6b96f6125459a9176725
SHA5127e453a347a8f526581fd64d9ff79c07fc0c3ec4373f85999f8f60f2b439acf7d9f0cce823a15ed5af7fce805049af8fb052a484ab726c13bada69ae1b4b8777a
-
Filesize
8KB
MD5b21b441b50870ff0c4cf8092967fef02
SHA11ec4d3709306c9487b6745ae51b4adf52de2fe2e
SHA2560520fc2ff818caf0c829b07a85c593ded9d9924f3865b6d3ff3c0737cad73034
SHA512dbaf207b0f4577cf9012b100637effcc3294a5a1c3f353d130b7e677099aa1ca2cc26247674c1a14dcffb7337a28394ce7abd511d3057d06c3dfd5f7b781040d
-
Filesize
8KB
MD5e65b32b25e3ae1ce0ce3baa48dd0004a
SHA110e728832b35b59a0b4fbc145f9f0798bcbb4da0
SHA256778108118655db28e884c889447fd4222f112b338e4903abf9081f077fb90acc
SHA512d3573900d98fda6d2a1e5c2981670e039d556df112dc1458d0ce633c6f5db96264203a12a11ab43279f0bcb84b226cb3f6e184b50f1b542d158fe4f35855e8e7
-
Filesize
16KB
MD5d6fa404baa513e2d24f0548ebe0a15bb
SHA13b4e24b3fdea6b04dac6fc17a45e96df6206a810
SHA256f2ba3a71a078d7727a4cc38bc93a1734b9037666d191b494e6f7e81f8fdf5e60
SHA5128c4cc32174875ecc18b18267b0fab712e5cd27b0d05b4c2da565202ba3fafec0f75ff96cc6348945915bfe45961a3bfbf81a3192e5bca5a6ca36ace51a6e5274
-
Filesize
16KB
MD5d99c8bfb836dbf57094cf5ad38803fcd
SHA10699fc16d6b364afe858122f7cd685fad99f92e9
SHA256d5a78cb17568333daca8cb11e54b1da06e41cdf2b9a8a1533620903720ea07bc
SHA51254a5c0138d8d2a2b3343270381e56da8b28e6beb8ab9512c5c6f79e7f253c85d7208a4b8df75a7d746e525ee9aae44c26e1879d71f74b527e77ea329362f3c10
-
Filesize
16KB
MD555d46edaaf32d3777b4456f249ba8c24
SHA17529fdf9eb01d4097e7192c7cc005d37459c19ae
SHA256ffaa40c4b0b4832246ff003f58b98007069fd89cfd14b879e3fe7ebc78724b2e
SHA512fd9c3a86bf877424e7a3f39308868c7461437b153957e9a1643cc0f4aef85f3bf1a744abdae7b8adad915742d0ffb08468f25826f094151e6d1bb6206aa21a5d
-
Filesize
16KB
MD54ab01da90af7018b49f31c94f86849ae
SHA1a53b62e92d542812ee59be9d70b2fee42ecdd362
SHA256e6fdf2993e086926990f80cb07146c02b82322ff804affa67af8ce7858b8f268
SHA5123d1e31ef31b9cfdc0e5472482415688457d8ce60b85c14605f3acea8c6a4bed40f18230b9c7bc57badce7e404d300e1697c6786e4f65aec54cf438e2b68d223a
-
Filesize
16KB
MD571e5e88dc1a9a5830e2d963ef0682262
SHA12fab5f38480da20152aff3a304d31db1b098f353
SHA256f4da0bbc3d85ad0a87edd8759205adc4a6b0f4e2a882b69d6f897e03c9cc7cde
SHA512826ac49d26ba7828518be8a62bf2286d9e5c72a502c6ef66bbe81daa744a3df2aa21f297957fbb47b825833e411d3a092bdf0ab7183821efcd79eb649ecbfbfc
-
Filesize
16KB
MD51f58e4d2a77d6ecb911e335e1e154a8a
SHA19b53ea2cca9dec8c7720ee7f998414a7b8d1308f
SHA2560043f591f82257f1ba456eded0580a4ce79184b48a2989ed06d69d7a94748366
SHA512c7c29eacf21e27c30393476309fef2f8dd97512b45292c31dc299e44f39829d5396a0443ba0f72acc91a786acb382d15a863e1b8fe4fa6e2e5fc3042c8ecb7cd
-
Filesize
512B
MD5a889448ee3b41efcb082dc0cba151df6
SHA1a1cf40889c9df95d934fdd51e8112d59fb14f506
SHA2561fa281925ccda78685909952f5de4f4ca8898f142a9fcfd2e0a7dbaaec8b459b
SHA512319ecf0f3147cb2a94337cc704fe86b55f8b5da7324f387c170b6d2c246e9ff890ee27c671c021262e9e1126a456ce691e09b6f4bc121ba75aca6fe77e2532fd
-
Filesize
8KB
MD5e2331d017cd8a4e2923d68ad6cc20b10
SHA121435bc003b2fca7131bd7ccb855f06f8599cc27
SHA256b80fb078bb1e98f3a1c3de59e13622158986107d622000c4d4bc18760e06198b
SHA5124d02055d454a457f9898dfc45cb99a2df5a8d6f0d905100d31d6a97899028769a4b30c642abdaa59df9d1e245ef7461cb4e1308f1f86e4a84ac1ec354e48bf29
-
Filesize
4KB
MD58d5624cbe00774de3c1c7fc285096959
SHA18dd87a5ce02201c18ae1d2775de821274aaf356d
SHA2564f593b4992b1c9ac47fbe55e00c933524b3fe4a51c827ac7e5a5083a4b8fdeb7
SHA512a1dcd7a312255201891cce34d80f4e972dc9a402d6ec9c14c4c3608c986d9da7270507a173e43e9dc4166598abbe6d6642e5d6b3047e71f3a28f98678eca1fee
-
Filesize
8KB
MD51ad1d02eb366556a0f01665730c934b5
SHA19a39844843dfd9cbdcd16bc9304b5dfa9dcd6d62
SHA25628018d73cd9925c52a3c299ae17441e8773f2024cee688800fc5d7e2e4cc08de
SHA512562df4e7764c53a6ac98614b9e9ea064dd3b7c6b872af31563a4456e26105635abad78722396628191295ffbc9f55a19866ea3f146f3ca0b835690fbbe416a0d
-
Filesize
8KB
MD5ffca365054485ce0d02e26ca4638b651
SHA1b28470bc7016c2ec5e6de707992d912183dbe696
SHA256651ed4e808141a3eb85aece2706ad106fc289d9acb350c17b54572a8c4e9666a
SHA5126e18faccf4ef536d35f030ce37f7e85042e68c389378fe4bde72b53d845ffd68d4be8d4bb50b510c4d0eee395cab342ac11a351512bdfd63b35da36a1c0be0c7
-
Filesize
8KB
MD57416216176f453167f229d364f8b4d3f
SHA19815043f0fa183b3dca022d8c05339744660daba
SHA256cd7f10cf239dc058b669cbdf0f08e53c4f91c125a8a71369a92b239ce46ff621
SHA512cf0315c7a80f0b5f7c1041b7fd424a5cf91b0f047e6a6ba6677b9487102dcee27960951435121612658d603007b0037057039e53dd1567acf68e06b722048ffd
-
Filesize
559B
MD59fcbc6947d0cf223dfb8ea092c87aa85
SHA1b56364e916fbeb8c47499997dfa68797e092b596
SHA256f96e8b4bbab778a5bfd5b814964a4cae219996fa5536e2b77a8fc44f289252eb
SHA512c7c0ef31f453bb5e616dc6b859b29d8c5dba6fab4000112c4d0090237e04deaf05b7c7d82ea9d915de527f7178eaf8f9e909c8f0667dc0a04f16ad2e5c3663da
-
Filesize
79B
MD58b0a3a3e6a677c76cd0eb36d0fb8430c
SHA144f51920dbb9c528e52a0fb38041349b99ee329d
SHA2564b95ee04a26512dd966514c9f96efe255840f77845e3354548891b422aa02e7f
SHA5129f7592f3db8d3896e29d71e46d8a62622dc3361dc78061834d491a107f561f3125e72a6a8b3c731c3d88c02402f3bfd085c614a4a0c12b4585b25006c51058da
-
Filesize
1KB
MD5df0ccce2df0f00f67eb8b8153e5393a9
SHA10e581e2042cdca2c98bf7b5f9020e9806df448ec
SHA256571652b99dc57edbb215fcaa429b370937f15b233bef7d30402b18fe8d3c488a
SHA5129e52a07fd3923d85fd7b4e4cf64e017b3c0e2eaaa44fa71bd2bd806f6d9aad8ba1db8d618749d34be5cf4c527631cafa8ead5413fde46759a0eafb3516e2c4b9
-
Filesize
2KB
MD58a723a0f878231e2dd5a1f6553d8d760
SHA1b51cbf922133f526a707608712c097a59db5c3b5
SHA2564838a425d1caca4f73a2a6fcb705d16e342ec8b503a697207a39091b16d4b4b7
SHA51224aa98c1dfc0b671f65bc738bd33ac1b38966c7400f21e06d0e51e5a4754d823f4271f39616f77e4857d42832500d539d5ef6ab3e1e637448c31e93ed5a5eca6
-
Filesize
796B
MD530d37a9e3c4e758d2314d47ecf43c930
SHA135cd5766ec858527bfe71f4b12b64b03d3c64731
SHA256cf53c4c621e76ef87e511fc78bf74296849e46f4d11d2296e27748b5fc8493e1
SHA51238b857c55c8fa9366f657dc1b37c7ea4df22c2d05fb68b5652c21561f07a8fc0e6c28d5a055e1698d46feb162ff3a4b1c4f044466ea7454b61234d5ef6d5db6f
-
Filesize
907B
MD57e42a6d37f84dd8e1422afca1fca3e83
SHA12955117ba56391dba9374d8ecf97cb5d2587ee20
SHA256e5a75ecdc34044b930a3d9b754ea2a1c416e51e5403aa38c19893b8b1808f462
SHA51292231b00eea92ce8548527cb99e23ebf0261fe6c104c2657987545ed4010f69d8d951353792c7cd8eeafb8f7d413cecd23b15c22bc289ae48e8c574c57127bf2
-
Filesize
1KB
MD5441eb782f82771439ca3c6cf37f3f696
SHA1a2e750fcae4d4da504ec7e06c83611bf4a2a289c
SHA256e0f8882a58f48dc4fd362759e358e56502dc780bc50dc37b21fb6bf0861b7dc0
SHA5124897502b9bef8548178149aebc128e555373f94c099e52d86dfed7bffd2c48e1e916b3a2d4e55bbdc2d9a2199d62b1883e8a688c1823f5b0696464b73fca073a
-
Filesize
1KB
MD5f133b06147d3a62e6e7694a7cb9f9882
SHA116aeb42895bc494690dae7b839ee16e13ac9364a
SHA256b92364b82cdc70e842fe6b11297cc3d3d0e93a348bde284e1b323c80e677a299
SHA512d8f895ce05febfa4fc4d12184ee4c64b3369655efcd07adf5b5473a1040f163fb016173de08e186e94a1484d9f27d2e02b5b6df996037cd24fb309206abcd960
-
Filesize
1KB
MD5465c157abf1e96bac94e1106b07a4df8
SHA1a526c26fdec2d0fcf7a9f5a3a40e848ff8ecb885
SHA256e6072121a50f2be4073367f5cb2f7cde4ec63894891271016427e9ceee42fbd8
SHA512e1de528bf4af3de0660f7b8f2673e4877e58b9d764d2798886967fa4ecad73916385ce73523b33025952cfc9f18f678ba3ab05ead40131aa7e37a3ba4b6be0e2
-
Filesize
1KB
MD5935454787d07b55a0bf196d23a3d07fa
SHA1ef94b3ff30de349f177c55c1ac7fb4ba962ed281
SHA25662e8f7f85bbeb88d346807f2446524c8ae1779afd61ee23e5ff6f865a5bb7a20
SHA5123783566f7df41eff2862cbac6d132707e352c9ac76bfa8a14b5551f6a824af84e726e20307fa5f95b9f1ee1388300ce70ad3a55202aff75eaf1cc418370d18e5
-
Filesize
2KB
MD52d858e8af5d9426fe061df5c82ffa6ff
SHA1bc1b2eab876aa221b6449d11e482de24b777d58f
SHA25673d875bdb982c50c666e30ba2b8ae2dceecc63cd0d5f8a35158edfe5f3303835
SHA512aabaa75856cfc07bf65f3f2dae118e357cba83a45f0a900aa625f576de47c2753b0a00fb1913e45c1d743acc0f6e0100a4a6a326f402b0f4664ba181ad670c0c
-
Filesize
879B
MD5c87f59611549d0273e241f4fdd525467
SHA1a3cd5b092a0ca29ff5db6a31859ab221448d2f52
SHA25630356cdc842520f6dcf2af167f5dbb877b874bd679c3475a42a48870031abf98
SHA512fde41db33e02ffa823c2ca958065d871c4e7d3d6be4521c36b53095a49fcc49128a28142c7559fb116d9a47ecef891ff8436e835117d0b47842d1ef05e766fff
-
Filesize
1KB
MD55456d722bb02dc407a2413757a1c93bd
SHA1b6fa95ebbf583f16a1f3f9f07643b744ded83e9e
SHA2561da82f473be9e4ed53ce1c8577259d3c313b27aa2066244747aad8e7e67957d7
SHA512f636926808426b959974c59e1788e18583e4005a200dbda139fa4e38d5ec3845d8bdf80b9fbec55a275f89bccd2c079aad196ce0469db5e833b3b72957757a30
-
Filesize
153B
MD5987cb051364aa6bea7d04c511cc9c24e
SHA19af0868fd62c3a0b4e575e4e1a982e4e77a42f83
SHA256442119e7d928fb4104db389d612cea7e759921dfab3054367414d3fe7e6392ca
SHA51248a57fb0e3d08471df1ac3a2fac19e3a59bc1b487aee5281bc70e30952428022e2f3d032ad5775e56bf21264b9f0f874e719cd3a377a152675e7a8ef17c6c1b6
-
Filesize
56KB
MD5236c077c1280b11dfe171acc6c31ae91
SHA120518bdf5db8867985a03c2e5403b3b2c52011e5
SHA256206e3222e63fd71ac72ab88ec69646054c92ba36283a208ed210d5cea9fb9743
SHA5124af3586a60c13de3750470933b170c5afc05fde8b2baa1064604b7a8e5f1eefeaae5934de2ddd4c451339ad533d01392f0647b4076b21d37d36e4a920c50ad10
-
Filesize
19B
MD5f8283e405c803b6dfeafeb0b0570c3ea
SHA1f543ae8259e15f8e0523fddd71decae9b03ae5f0
SHA256b23a94d58754f409f736c687ee191b3fcbe573622e805752bb3d9c05be8383ff
SHA512137928465bd2c41ab74642b05d3a3c9283288af519976ec92536d0a4f88cea277c9f1a4a0a6470a86b7d927c177af14646c99d6169abf360a0ad7c386b1996f7
-
Filesize
4KB
MD50eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1fee434f784e73cc7916322e949f727caf8363102
SHA256b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
-
Filesize
512B
MD542aaf7873129df481cf4bbd5394444e0
SHA1a312e7ee29d03ab4525c80f242a3f67ed37237f0
SHA2567fb702cbcf2c1231a7852ecbfec08a637295582b2ee03b11f85e0845202ff1b2
SHA5128f7ab3115047a6ae6de53e33ee24b5e92f8f8969c0030b5357a56e1484a27a2c6f0ccb0e502c620f8248c5beae47048a00bf7fdf18776679d1df7d6580cdf934
-
Filesize
112KB
MD5a4527e2da6cef57bb9f0060a3362b64b
SHA17231864250e1d60a450bf3e1c7de14137684c8fe
SHA256129407f6deb1cad613a1ab78407e18aa943984cb31641b33d86305ae127fad86
SHA5120a3c5008ffc7325d150af79f8b7a9cedd79d01d5120fdec9cd5b0c96cfe13804fdd163670e818dc5a98827d3cc8599d6956d8e005e46f400a31f3a36801f1f3f
-
Filesize
181KB
MD5a53ea291b23c54d9d75f207eb0fd465b
SHA149982d75a0ead77cdc46fc63d89fb01ae6e318dd
SHA25693627488c663c9eb0920745148c111744eb544fac38caa03e827797a16e651eb
SHA51230afd8037c0e132a5cc75cc39ba2511351d9598d1b95cb3ce7ef137216f615fec035888230e7c154de41cfb4e8c0ada6170225735721a7c0bec584512dd641df
-
Filesize
2KB
MD59dcd06c3d83eafd5bd106932cb787570
SHA1478175bd650b4e18433c4f456bd809cad8e85d5d
SHA25679c59d40f8dbb63503f54491504aa5548825dea845c99c77e2f6321625847799
SHA512739636f0203393d7188710f4a9bed7a8eb0e00e97b48c8156a27d8bc9ff001087cdbff5a26a3491dd044ceb9a70fc75da69e48141d18231193700ec22852a551
-
/data/user/0/com.ftblcanapp/[email protected]
Filesize2.3MB
MD5fd21e00093fcc0bbba389db62842741c
SHA1ec899f81be970508fdfb455ddd92926df0a697ed
SHA256c558d180715cacb8e514a4b855f52765de1c86b2ef2e85423e2bdb10d570d858
SHA512ca6ed4d37b39295f238c0ea426e3a093f1d185c6f49f1631c20de096740550099e129946507ac4bd9f459929931c797f175d2fc4fcd46eeef325681e923029a5
-
Filesize
123KB
MD53056e1bdb7d4e19789d0319eff484bd0
SHA16791ae47aa9466fe0bca27ad6643f846853bbee4
SHA2568e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
-
Filesize
25KB
MD529469324e59dfcc052f24b5af4e7b2c4
SHA110c1e17ac6f598037bb51baa07945663645de4eb
SHA2569195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA5125e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2