e9b96768ec8e3fda55b902ef08b75648b929d7ef4cfca635e26f6ee50d328586

Analysis

max time kernel
149s
max time network
160s
platform
android_x86
resource
android-x86-arm-20240506-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240506-enlocale:en-usos:android-9-x86system
submitted
12/05/2024, 00:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

376c9009c8799b73fe3a7fa2501b4d10_JaffaCakes118.apk
Size

26.5MB
MD5

376c9009c8799b73fe3a7fa2501b4d10
SHA1

a0f1ce851a11d51cb42a7a979c9d64b9d55dff77
SHA256

e9b96768ec8e3fda55b902ef08b75648b929d7ef4cfca635e26f6ee50d328586
SHA512

7645e0073cc54649dc18b6933bfcd09835e1c710cb099fed8da301f25261c6a1a31325e85e4500d02987961350ecc886d3093fc9acad59901cee660220e499f7
SSDEEP

786432:yh1BlnN9AdktWIV029ftIVkgPrFd9N5DdrL:q3AeWaWrjp5L

Score

7^/10

discovery evasion impact persistence

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.fclassroom.appstudentclient

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.fclassroom.appstudentclient

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.fclassroom.appstudentclient
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.fclassroom.appstudentclient:core
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.fclassroom.appstudentclient:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.fclassroom.appstudentclient:pushcore
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.fclassroom.appstudentclient
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.fclassroom.appstudentclient:core

Queries the mobile country code (MCC) 1 TTPs 3 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.fclassroom.appstudentclient:core
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.fclassroom.appstudentclient:pushcore
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.fclassroom.appstudentclient

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 3 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.fclassroom.appstudentclient
Framework service call	android.app.IActivityManager.registerReceiver	com.fclassroom.appstudentclient:core
Framework service call	android.app.IActivityManager.registerReceiver	com.fclassroom.appstudentclient:pushcore

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.fclassroom.appstudentclient:core
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.fclassroom.appstudentclient:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.fclassroom.appstudentclient

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.fclassroom.appstudentclient
Framework API call	javax.crypto.Cipher.doFinal	com.fclassroom.appstudentclient:core
Framework API call	javax.crypto.Cipher.doFinal	com.fclassroom.appstudentclient:pushcore

com.fclassroom.appstudentclient
1⤵
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4273
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4419
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4461
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4503

com.fclassroom.appstudentclient:core
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4318

com.fclassroom.appstudentclient:pushcore
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4346

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.fclassroom.appstudentclient/databases/MessageStore.db

Filesize
20KB

MD5
e51ecca129d12b603e6b00bf5b995798

SHA1
2c8aa785508e393cfb2d7dbb9f82fcdc8536d662

SHA256
81fc99eac73929ce02c780400d24d162654a5ab9d2d57babb385ab0cdbc4e271

SHA512
62aeae3a8e2f3b41bfd6a083a62e5a409c87ab062dd0d577ce8bc546bc0ce40c4bd65e15d4f4a3ff67a8ae3924ec47bb2b70178ff0be16a18887b4419babc753

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/MessageStore.db-journal

Filesize
512B

MD5
2f0ddee5134ca5d2f619a41313b48f6a

SHA1
e483664ad791ff33837462976454b14e63d5b851

SHA256
4a0e37697f6025ddfb693c4d43c1dc17ba5505c1274eb699e352f2ff2f48d36c

SHA512
392e14a752e985b0971f94192127c32634494e0ba2951deeabb207275c3fec7db5257e076cbabee640f1c9f909b17b05cb9e87d7ea6d7198f55ee4b53b64f33e

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/MessageStore.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/MessageStore.db-wal

Filesize
56KB

MD5
2305d953c3b3bfaabb6e7cc61059ad45

SHA1
c991bf7b9614a8627e6e5de39652f44fc5245248

SHA256
206b8bd3a95f997a687ab194b3298c522e65c31110ad0ed4e1a3ecc35a18728c

SHA512
c1531f7da33bf2bdb60edd2d1012b8681d6409c4b8bd52633c40f9d3f7925634cfe5aa506d1cec188da0dd0bdbd6c05a2ba4e5ab1081e0c2d7068e1be9e17b3e

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/MsgLogStore.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/MsgLogStore.db-journal

Filesize
32KB

MD5
c0934c964e363f012706b7508c909ce1

SHA1
27f916246487501875db2165892b83d09bf56fca

SHA256
d6a42b2b1642dd028db524c24c16ce9192a0e41fa9813db819f5255d27744eb8

SHA512
520a06661f7deab42778c8cc4e8e0afd940a1c12c8d4cbd34cfa810bbebb49c0e1607965da77709223d2835a9c2d5852dc0c34f912075a1d824432bcfaace42b

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/MsgLogStore.db-shm

Filesize
64KB

MD5
fcd6bcb56c1689fcef28b57c22475bad

SHA1
1adc95bebe9eea8c112d40cd04ab7a8d75c4f961

SHA256
de2f256064a0af797747c2b97505dc0b9f3df0de4f489eac731c23ae9ca9cc31

SHA512
73e4153936dab198397b74ee9efc26093dda721eaab2f8d92786891153b45b04265a161b169c988edb0db2c53124607b6eaaa816559c5ce54f3dbc9fa6a7a4b2

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/MsgLogStore.db-wal

Filesize
60KB

MD5
de70eb882b8ee96e7c4c27140049cffb

SHA1
d3b465416e9d461df3e16ecc2a6a1cc60fb25779

SHA256
10f4d929955b1af5a3f289f2e6e392b76f255c5ca8383a7934d02a04018801a8

SHA512
6a78ca260d3eedb15492b264678ebfa2ad592f76e08fff8fc34a0d8a8a729f7eee35c41e17fb1369c1a10892086eff1d18b7edb3b7fab6560b2ce38a3855421f

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/growing.db

Filesize
16KB

MD5
52ecd5e1e9c11605225c2f2b5cbe17fb

SHA1
bbb13ae5249523789a1246f5cfb055e1a34b1a5d

SHA256
b10fd0e65de6c5db88c69d369c5cd540856861d4e157ec9eefa0a7820ec67d17

SHA512
5f31aa2deb71ad919081e97e5d454a9ec714595c69ea59391650eba4dd34c969393e87fd6dcbd9d15e4092ec626c273f01892f14eb115a602bb6ce317561b429

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/growing.db

Filesize
20KB

MD5
f7618616aa1baabf825df1513774f843

SHA1
567d16fb0007f120c1ec56b112f3d499c60c552f

SHA256
7fe41f1dc7c013d9c0f44f0aaa151ae6602309c32da08dc70d2878c5c4ee5012

SHA512
974dc425bb76ac25af8de7c35e3160a74e7af41d584cb5bdcf650e7703bd994df4cd7712437188cfd861d13d9db502d9897dfb0d0b86ec9340b01fe42a5e9331

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/growing.db-journal

Filesize
512B

MD5
971e38fda42b0abdf7ec6cee77b26f5e

SHA1
523e7e4bda2efc8d41cc491c5832ec4945eecc6c

SHA256
d1ed1a92e278c800db7724ba68460bd1cee3967f15002543eee28a13d58507d9

SHA512
256adfad089950200e5c53ef1dcd6500d1b1d23bd155df832434f8eb074d4d46e61715e7c5f0d7f827d168c6fd5113d99f162720d1fb0361d8bdd9b6fd1eef0c

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/growing.db-wal

Filesize
64KB

MD5
68962d4b37ac5281f0653d966f2cc2d8

SHA1
7f46b4ec5a54d8736b9249da2c1ad6c4c3055744

SHA256
b4005e2b42310fb4dd546178ca58a8c1e0de7d54bf67389be0ca5f2ce97aec25

SHA512
2fb3214f0526d4368ab210a632cff22f54d6b4b59530e6c58ae25501772be813a7aae310c659b4d78e4bf6e08f27086047a219e97742139e1ae8adf17c514d29

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/growing.db-wal

Filesize
8KB

MD5
42e473603e8185f4c359641c677c5f47

SHA1
dec5c6051459fba1493cc6563ee171a0863ec180

SHA256
45e63fe6d0e594c8c9c15b00b55cd96e84c113ce1645179ea6b8fad8bad1521f

SHA512
46ac2c982125e42eb7e069f4c4de762fb6ce8adc12246eb10ca7b9fcf90d03fb48a3aba1cedbf163f7e4f7dbb982463e4804e95657f7de7a3702c0003c40c68c

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/statistics

Filesize
4KB

MD5
74df2314078b4da6e9faba8aefc61972

SHA1
b5868f2680f99445005c701c933a11e029c53a63

SHA256
73c9cfb2b601e8c45cb4d90f6e2dac6bdf384240ca361ef00ccb3c3ce8334113

SHA512
c8230fb3203020a4a3838131d63e697f35401cf7b79ee10725dc39b0931610238d1f936f661e8fbed68f204698f34fd91d4b16c84a8a554f3a22942e3e64d853

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/statistics-journal

Filesize
512B

MD5
5849365a54fbc6879967e3d6609e69dc

SHA1
29db52a4d02e815cb50a4a5e8377b627500ef049

SHA256
8d3ccf4521584f0b3eab5744defec3f7284dcbd36235ca7b2efaf636ed6d2ffe

SHA512
1ad3d2211b2166b0eee3a02e9d387e5fbff0f5903e1339cb605d74734fdbdecc308e5e3e53dd69c66054329f7cc8f329f5291508d033219950c9b718afdb32d9

Download Submit
/data/data/com.fclassroom.appstudentclient/databases/statistics-wal

Filesize
32KB

MD5
19248079ae7aaa7ef826d398fe8459f1

SHA1
ffac100ca4d26ee24855b79f3718b933d750506a

SHA256
670f3021b28def814ae06ada0817a792bbcf14d89d242024429d7add3971585b

SHA512
9a98f41a7819ec65e0f992e4ed967913bf33b5b5f1f3122e1effb0762723c4aed2f29f891eb11d8df98bc9aa4ca22eeacf04e859a4d507fd37360440c3e1afb6

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145400C9-0001-10B1-7ABBF8255781BeginSession.cls_temp

Filesize
77B

MD5
0cbc5fed2ec8d3c48b12d2111cd38ee7

SHA1
f87fe61d8c27a17479c22be492a0bed40ec56835

SHA256
f3aa1b55e68d9f4a07297300126a275c1d4cc68732b6d11906bb39f7188d7380

SHA512
f2a1f18a2e65f7ee7998fe89e3c80802086bdc9d8b72905eddc41d5a6aceb623da66745b0752a0ba6125099315a8465e9126cc87ac87db6091e5938f23a5c3b1

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145400C9-0001-10B1-7ABBF8255781BeginSession.json

Filesize
132B

MD5
8b4ba7e492ba932047d9eb7603c8dce5

SHA1
c5a43f2baadd9fa2cc46d1a1eae99cd38d732272

SHA256
a15024069818d267c1eda80153d091474ca5c8a53862ea328a40994bdc144159

SHA512
21a5e4df6e9076c66b4f36b93605ee9445c68052dbd2dbcafb4b5cabc38d959a893a9ba19e826f4c0e2276468b5810e5cff391070e4dfbcdd8bdb5dc7856b5bf

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145400C9-0001-10B1-7ABBF8255781SessionApp.cls_temp

Filesize
135B

MD5
ceeb156e126a522473d6febaaf0f0c75

SHA1
ba088535c05951a4d5030a6aa325d6c1772fd290

SHA256
d4c35017d6332b7abd18d58e5a4cc76c0004d835f4e31561e78f66c0cf7f3ed8

SHA512
70c23754378198f94d12fa637ae4c2be532c0e2629bfa88853ffc5856d2a4544a30b9b4909e0780916275c196df3c27a3fc2274e1c2397d747f2d9979ff3364c

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145400C9-0001-10B1-7ABBF8255781SessionApp.json

Filesize
248B

MD5
b04d333fd162ba343861768f1eab146e

SHA1
1ae711e5b76c571283a0599f184e02272b7660d6

SHA256
ccbf3964b147159ab61ee154119e69a17b11d5e9331dc3f81da8f933ac3b09a6

SHA512
7fc4a2ab043d19850529a3bc87b7b03ebbaaf2a610d429276cba8b54fb846105d3a322993c88eec024d2703b8347490def15ce1e8ce208106807dbcd7157b5be

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145400C9-0001-10B1-7ABBF8255781SessionDevice.cls_temp

Filesize
70B

MD5
8366956edd83f4837d25321623a069b5

SHA1
7113945964a9d630f3d92f8237282b710d0d1a9c

SHA256
e0f4cda4d386eb897b538249c60aaf4f1adc9aa31f7ac1e024006e01aa55fc1f

SHA512
14c816d1a01aa1b8506914e6ec5d1d31c20676bbe9d926300a40b8fa4fda5719ceb7c81e6aca0643e184520ed8ff3b88b991fedb887995961a470e004c4a8272

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145400C9-0001-10B1-7ABBF8255781SessionDevice.json

Filesize
204B

MD5
5d1ce0f2aeb4721dca215b6868007c78

SHA1
d93ce1169ff37b19a79c7b4494d939a1f4c082fe

SHA256
44c8829bedc7d9caf7357dd41aa13e838ac1fa5a055af3945819cfd6424a93ce

SHA512
890f5a61c21643f31eba828cb0fc4009e0417e8885846605a8ce1c969f5203c62235d3ab76d79fc31d855238f8eb9eff6d1676f0331e9959a0f088bb0acf44f3

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145400C9-0001-10B1-7ABBF8255781SessionOS.cls_temp

Filesize
14B

MD5
9b3d4522944ce6396563812bfdb92fa9

SHA1
6d2a6133c8f01938a48ccc77ef86ad8ca335c020

SHA256
d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

SHA512
091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145400C9-0001-10B1-7ABBF8255781SessionOS.json

Filesize
54B

MD5
93023624eb8dff5c20050da136aaae0a

SHA1
acfd1ffed752c28fb135ba83c0c6345ddf2f6995

SHA256
968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

SHA512
bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
482B

MD5
d5248d042bb5fd8004d5d807bcc9d47a

SHA1
3a2655dfcdb22336685a3a15c37159e22e4ea733

SHA256
18a65aaecf036c85e51ff145be4f220fdba96d537bdf7d791d0c780e9aa32237

SHA512
573271ea3354e6ead9273fa93b3e4f6ffad3e2baf888450549e0ba108af787b3b87bfeaaf34476c90d43db1e1ecbe31eb79324d611c1f4cd35c5ea75774837a8

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
3KB

MD5
8d536c7eb10e8d9ada24b9fc67847021

SHA1
fccef2126cbf5b4ff5c2a9c157db16827358a0da

SHA256
8c3ab78dda4a9f853439e089dccebac678200a127fc4f1ebaa4151d7602ea4ce

SHA512
4d6f2fcaf6846ee0bc60e571a9f5783ad284cc58c8bd9b61a9539e73d202d9e2882d5f1ed26e6f30e7e1b185023f7aaef18ca7c1afa80deb31a25c6f455620c2

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_7e79975c-2f4f-43a8-9788-2bae576747e0_1715475540516.tap

Filesize
370B

MD5
0b1a3649d6f0deda68507e3a4763df89

SHA1
dbdc5de6d31a521c239e87bfd5adf708b8288eb9

SHA256
6a2cff93603d437379f47c56d8417a6cf66e88cf0ca0ffc6f12400bef0cd293e

SHA512
fff365ee5bfddea0e8e34d5f53726d9eea6aed803dfa72a6dcce5edb1879a042d2d1d3bb9ef6476015f8aa464032385d63a3453067f58ecf7c2220dea73253c8

Download Submit
/data/data/com.fclassroom.appstudentclient/files/jpush_stat_cache.json

Filesize
119B

MD5
9d801792bb168015acf62ebe718e6531

SHA1
de4f3ed3c551c928d91340c3388d1b95adb293a2

SHA256
d7efdd3f0d31621c7df6e1413f57032de8e615f6b0673e69c18705f39a74fcf5

SHA512
35d36fc8cef14b041a3bc8c56c5712276d278e3eba15c71ea1ce97c803b654c9c5b4c5bafdf768ca7800f4bcdab404d598554aeb369cddfdf5d42bdeaf7dc04a

Download Submit
/data/data/com.fclassroom.appstudentclient/files/jpush_stat_history/active_user/nowrap/2583f1af-80bc-48a7-a2c0-7cbc9e360fa4

Filesize
159B

MD5
c89196e2d408ec6597f4564653cc1c4c

SHA1
a78505a98cc8401d3e43bdc8ef99e01dac8cb02f

SHA256
899886090e548033a1fbe2888df3a3026cfcbd264991880d48bb05cf83bef6f8

SHA512
4fb4964cd32a4b230cc0ac2986bb748adfac8c313300b3805e43894a820108735ac9b81b68fa4f5b05b9fffb49c89f36d18eb46e498d7b88569898685788417b

Download Submit
/data/data/com.fclassroom.appstudentclient/unicorn#cheese#

Filesize
677B

MD5
6c6a7015b21b1a68b1cac3d25aab10ca

SHA1
211b1dfae3f93f4bf6ffbb9cc555a1e3239e9e79

SHA256
2b2d5118ecebb6bc30c176636c50e29dee4b2ecd508f6c6c2580fcecb5917712

SHA512
6ef625b0bc45a0400831cf09cfa8bff8e54a32fd4829bf9513d541e012a6d651550db23c811f584f484701c3f21ff7ffecbae8e417e50e874c2a03e3beb1fe98

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
7555846955f70521302fe51ba8e9d4a2

SHA1
8c5f90117a9bc308204363aec2d19b6bfdf7f3c8

SHA256
8ec7a37661d1ea4fec409e649006802d22a04b578d6b29a83cfcd0bbfaa57526

SHA512
6c5356033e3c118fb9595be03a68c359d5e7daa35e4c0710f8417605646819224022fd98da5e320ad562ca9c5266a9960633a772d1e4b6a5ac685c930ac05b68

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
3e5f7a0793d6ee8eb0f5c4ea4e028c95

SHA1
1df805c0e143552d13d90bdf4f02ae571b2f2ef4

SHA256
2dbd4b791d64a7b86668be31dfe1904a7fb881d7eff0c19b6cb38a05e854fbaa

SHA512
6ed03d6e5c5693be3d6dc0849b2b6e37343024ec142dc44ce648945c7855472efecc06c26e73c66de3ab7ba758f96b89145dacd0b1904f3e3027b40b88fdf246

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
c9fa26ff83d3f9d7169e2c7dcb784408

SHA1
78f61b24399add628b5885977039f8a00e40661b

SHA256
1cf13539e654269041a57fbf32d226d763bf19d18b6d516918b62bebdcaa084b

SHA512
855365286e3410bad348138dade5f3c77124492c88af35a1a627980967de9ac6e31c840ea455e029dd3204a8c40e7b5dbf3ec8bdece75fa30cdd9b86b615e368

Download Submit
/storage/emulated/0/fclassroom2.0/log/log_2024_05_12_00_59_00_250.data

Filesize
593B

MD5
bfb4c0f646a5577b97c81c610a6d50d7

SHA1
29df7c205fb87bdc8ea8f99cf1a04bd59b813336

SHA256
241d2d4a78c0ff79db7aa955d998f415901c705a76206e97c6908df9c09a8959

SHA512
732c71f490dc76e7aecb00926ed47f0033c081f1a0047a9ac3f8c20a8fbabbee12677579fbb73b375a340ab149c4c0475017a15f2684fb328456252f07a5de19

Download Submit
/storage/emulated/0/fclassroom2.0/log/log_2024_05_12_00_59_02_185.data

Filesize
700B

MD5
1505da1c39dd48ff70e47db63c3fadef

SHA1
355e09404f6871be0bab5a8aac0c9391b6fdf5fb

SHA256
d64c2e93f0a03c258dcc9f8c20bebec316b43ee5d83066121612d81250464daf

SHA512
db90aaef267555a4d17e2d6f3b7967ede3ceec49f10d686805b73c1eba05352ef0a61354e841bab465d155f096f6c32f540e7678e178bb799bc69cf3dc185c01

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads