e9b96768ec8e3fda55b902ef08b75648b929d7ef4cfca635e26f6ee50d328586

Analysis

max time kernel
155s
max time network
165s
platform
android_x64
resource
android-x64-arm64-20240506-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
submitted
12-05-2024 00:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

376c9009c8799b73fe3a7fa2501b4d10_JaffaCakes118.apk
Size

26.5MB
MD5

376c9009c8799b73fe3a7fa2501b4d10
SHA1

a0f1ce851a11d51cb42a7a979c9d64b9d55dff77
SHA256

e9b96768ec8e3fda55b902ef08b75648b929d7ef4cfca635e26f6ee50d328586
SHA512

7645e0073cc54649dc18b6933bfcd09835e1c710cb099fed8da301f25261c6a1a31325e85e4500d02987961350ecc886d3093fc9acad59901cee660220e499f7
SSDEEP

786432:yh1BlnN9AdktWIV029ftIVkgPrFd9N5DdrL:q3AeWaWrjp5L

Score

7^/10

discovery evasion impact

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.fclassroom.appstudentclient

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.fclassroom.appstudentclient

Queries information about running processes on the device 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.fclassroom.appstudentclient
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.fclassroom.appstudentclient:core
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.fclassroom.appstudentclient:pushcore

Queries information about the current Wi-Fi connection 1 TTPs 3 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.fclassroom.appstudentclient:core
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.fclassroom.appstudentclient:pushcore
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.fclassroom.appstudentclient

Queries the mobile country code (MCC) 1 TTPs 3 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.fclassroom.appstudentclient
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.fclassroom.appstudentclient:core
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.fclassroom.appstudentclient:pushcore

Checks if the internet connection is available 1 TTPs 3 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.fclassroom.appstudentclient:core
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.fclassroom.appstudentclient:pushcore
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.fclassroom.appstudentclient

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422
Checks the presence of a debugger
evasion

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 3 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.fclassroom.appstudentclient
Framework API call	javax.crypto.Cipher.doFinal	com.fclassroom.appstudentclient:core
Framework API call	javax.crypto.Cipher.doFinal	com.fclassroom.appstudentclient:pushcore

com.fclassroom.appstudentclient
1⤵
- Checks CPU information
- Checks memory information
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4878

com.fclassroom.appstudentclient:core
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4948

com.fclassroom.appstudentclient:pushcore
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Queries the mobile country code (MCC)
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4982

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.fclassroom.appstudentclient/databases/MessageStore.db

Filesize
36KB

MD5
b4a5bf5b045bd9c0a8823c9d37c024a4

SHA1
c38055fffdf7e576a23d8d1c1193ae3685ad3809

SHA256
34a12c2f77c006dfa4055f3c291d6ef00eb264f1e1e998b825c3180e9de791f1

SHA512
a75110164456bdce77d04f205149e98b9adb97d2875791eb1260ef508466fab6b75f062ce00d7ce003ebeb35c9b558fb5ecb1febdb235e9cbae07276abe36142

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/MessageStore.db-journal

Filesize
12KB

MD5
86e89703263eb191e7f5512cfd2533f8

SHA1
61ce2bc0501def916d6d6034332b97f53306a42b

SHA256
93b451e9bff5869fda73c6955216fc611b9d1ebd89789fb49004f0757d93ed41

SHA512
64a06ddc0255da5cfc4f37d809929f1b649068956560c78b547364e0ea3980a07df33ea4fbcea331c56a72e505cf685539f6e45bc609e5e9d5c086385465d5d6

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/MessageStore.db-journal

Filesize
20KB

MD5
36ddebd07a2070480753b1f62a2fa03c

SHA1
2cfff5ba99e46e684f16a476c6a84ef02c1b840e

SHA256
5aee944ab4708495e58e621236fc013c8ad128e90d0b820110c6d87454aa5354

SHA512
89539950514991e3820c2176ecfd5a307cb7bca392357e0d0d9363b31a3b601ed23741e6d3c830d4292ea2121d0f31a0b01be46fdf213513303453676ce803b2

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/MessageStore.db-journal

Filesize
8KB

MD5
a113b0fb58b761cc4d1a7edafc38289b

SHA1
de66be4a3939b79476fe0b8fe37aceed45ed3d2f

SHA256
9fbfbc1aad63e22d94f077a6a9b6e109ca362c750a20fbf8378a86e8fb0db545

SHA512
4b27c52125e7b1bcd89f4ddbe1ea4c5b5171d44f56157bacc2b4fdbfec140bdcae828eddccbfef6c4ecaa00d73cf140e7964ae8292a4d4a6f300767ef324a58b

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/MessageStore.db-journal

Filesize
8KB

MD5
f3f33b2a52e49d9c6460d315826bc3ac

SHA1
8021d2e2368b01489d74ed0fd2fdb6d97746158d

SHA256
40dbb23291f70655952581f5d96d56bdb8f3b6885085e25c6673b71dcff97ecb

SHA512
bbbc179197be3e5b3c01751c6f51a112f089bc91fbbccc98e8a9b7963fb7873d8e18df4b05d15109f75af5568d4ba64255b40d145c01594d5d8059da404c487c

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/MsgLogStore.db

Filesize
48KB

MD5
114ed22c3ef6dad2dd8e867682a47c9e

SHA1
4586f981611111fd7b107ca723019cf153585226

SHA256
b92877d95bf9bf1bcbbd45e3b165371f57db8868defb0db28476c6c05930939e

SHA512
1c7670f690983f9c94f4b88fb3d75cc18a126d779aa38ad8f4bfd5de37a5079e03cdd2dabd296796f588328ddc3144200e45d57146771e56e47882d53ffb10d1

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/MsgLogStore.db-journal

Filesize
64KB

MD5
fcd6bcb56c1689fcef28b57c22475bad

SHA1
1adc95bebe9eea8c112d40cd04ab7a8d75c4f961

SHA256
de2f256064a0af797747c2b97505dc0b9f3df0de4f489eac731c23ae9ca9cc31

SHA512
73e4153936dab198397b74ee9efc26093dda721eaab2f8d92786891153b45b04265a161b169c988edb0db2c53124607b6eaaa816559c5ce54f3dbc9fa6a7a4b2

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/MsgLogStore.db-journal

Filesize
8KB

MD5
96ceaa023f4524340a0c85f3c6a09407

SHA1
244a944697d824f5dd8af8e28b59ccd003971926

SHA256
244c14730a512535ef66e1c2e0926dba4f491b281d2b8e23fab46c90bd33a0c7

SHA512
5180a05384e43e60c2743f8fd258c8b607af8acb7ab2202e43093528eb97114a28c66df38ab164eee97a18670f55974608b3181b48a03bd81d4ef9d4049fecd3

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/MsgLogStore.db-journal

Filesize
8KB

MD5
aa2d34ca6464065c718e7bfa1e58954a

SHA1
c9b290762b79f83f192930d8af137f8bdab8c88f

SHA256
bf477250793c9341fcea1afdbe4ef62a34c9100e0c1e8e9b27cbeca7ebf0e829

SHA512
22afe3a3138cc1c31198bafea46ab11778927545bd2588354ebabf2f0e9b546db5942485169c5c6e80bf85cc344a5b741b850034781aedb8241506553d4bb485

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/growing.db

Filesize
16KB

MD5
ccbbd263898e1989f75748b0688aba71

SHA1
a79657adc29649a5153ea7e8f03aa57ad61412af

SHA256
88b8b7233f3c58d573e03e8acafbb48274df3477a3773e2df3679903bcf77f12

SHA512
42fe0fafa302809c2c66078c187531eccbed964326c337abdeedda39072035db98b2295ca8e09651a920d50c109713ebd0e472155183a0265f4c844e5b1907d6

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/growing.db

Filesize
20KB

MD5
7af696cd81b48bb389f3c07747fa2c57

SHA1
ded2df0eb2c6aadaadde47508f978d20df467983

SHA256
8184685c22d6a5664862628b19be91559da0d68dc12bf5b9906c4c710cc0bd9c

SHA512
06133b32588d341265f29f33c1dc180b037506ba599e0ed85f958605876e7619da15f02dba2c67221680b3df3767942067551a36dc2492f187a7427b0acffd33

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/growing.db-journal

Filesize
512B

MD5
24d49a1cbd5c26c70900634a5206d670

SHA1
dffe239320b50e7aae9274af62106c6eec5894d9

SHA256
29f232b8331fd7a2bd9ae3a79869c8042e621f5a36d7f75eca4e4f6dc9760209

SHA512
caf4a12db9db108195c26e93739614bed2a7dd92b87cea30b589861d28d73eb0b96359514fc924c93bcf9628326bbd3ce704b9ee995be39853173c183ac4cb6a

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/growing.db-journal

Filesize
8KB

MD5
a33d00aece506e5a9134bd000599f1e0

SHA1
531da60da7f65fffb9bc29ad5331100e4c0e9b57

SHA256
9dc96cc7db8533adc0f41c0e5588b3d3c82fb7242cb5d0b2d41158e1c19bfe66

SHA512
d41e2e26c858edade6eb0a2a9ed3a7446dfa25ce5e260a2c84cf158a28989ed878e32d26ed22b05b01b90e3bcb2bbb1308f3079ccb9bf5df90ba47b0ecf3ad27

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/growing.db-journal

Filesize
8KB

MD5
e3f045372cfd6ac77136453f3201d1ec

SHA1
c03fd2646f9d3f6ed9c988a1a6c33220dad1bf8d

SHA256
8e20becc67086f60111a087ea6f88cf988ade2af66ef962ef16101621604ac70

SHA512
0f7089552aa0945dfad9c8f5700a43116870e0db484dabedb8470e72ffbce872e2d3221a81f936d58c6369d3f09bd53f4f0921c746af2997423dcf3bc5f5817e

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/growing.db-journal

Filesize
12KB

MD5
2c81ad78425a8c584bde9a09bb7b1a29

SHA1
0d06808954248fdf6eae59302f59df9d258af51e

SHA256
ce76c812c055e74f0fb9b07381498bdda22cb03c3c2386fc2853ed980ca43ec7

SHA512
a4b48a38255b95d94c50d92eb5acc96d6d2c2e0bc8a4fe23365ea5e3ba0b58d1d65ee3f7f620d1f4d0c0df22ac4a8c43022d2d3bff4300566eb0bec085f09a69

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/growing.db-journal

Filesize
12KB

MD5
96f3587a0a7ceda4f1a0508333b646c1

SHA1
7eda9ce16415987f2e154f4735b2c362a6a3048e

SHA256
a4206987d86577f052a905000d9dc8a5c3711927d0298097d6b6bdfc87ae26ae

SHA512
b8a8ef97a3452f712304014ac224261694fa07c4a69e7bce3ac83cd7948e23929ad6b93e13c4ea5689fb2b0c2b673fcd1b12b9f149ec913bd1f29e6d41a851a6

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/growing.db-journal

Filesize
12KB

MD5
00b2903b0457ee3a74ae5336912cfa82

SHA1
6535d1413f33a3dbf9afe51a86dbaf1cff9fe45d

SHA256
63059c447b13cb0f8f3222780164fe048008880d93b893d4b74a866201a948be

SHA512
c0cdc6ebd9953f566c5a895ab42c58f5007b1edb02dfcd24cd857c5fcdd3937070d0bb3a618153f034f8ed2586dad1bab62c05120b67f357cc1f5b071f0db900

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/statistics

Filesize
16KB

MD5
69b0bf6f781a0056c668e2ca19c28530

SHA1
a11ba6193eb6ffdc553fba6101efaa67c021a4dc

SHA256
114fd5d1560ade0d1a8033feb6e72574bce09b32207e6277ba78dada2a48d839

SHA512
5075edd51f64925ddea00ca84b9e7571a7e28b2685d1f1c196fce28ef50a871db36227f6218849f52c06dd3f8d8026813ee1deb816c3d49b273f10302a823285

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/statistics-journal

Filesize
512B

MD5
b4396f316939ed5e521d157acdd87012

SHA1
fda72dd360f4e502cc7c42c7f80a0ab4097dbaa7

SHA256
ccfa7b8c90fdfba4696e5f957b98658f0cd1de93ea64789a89f03cd92dcf0618

SHA512
d8954ce6de8894bb26fd5f0dd060785381f0d161ba8b72d8a2c0624a153bf1c24388d5d73b271c0c69ba66d10dd4bc6c709e43ac3d29495ebc0b3299bcc45c50

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/statistics-journal

Filesize
8KB

MD5
70ec961e1cb738ff6fa92805a2bd830d

SHA1
9e13be52dc8d08464ea111a1065bdb1345bf1b1c

SHA256
d32880739d0e001cf0fd418dfa4fa26e89faa0c835ab0423600c4afc16aee5e9

SHA512
41e9ea3cd4da04d5a1ef449e9e695edaa715c44d90ca744837c7a788090ac8cef15a2b6d8c87927bff0975361b8cbaa72c840629befe2945d5845d0ef996a141

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/statistics-journal

Filesize
8KB

MD5
f3d89c35016ee1bf16f335f210f152a6

SHA1
bf9ffe4b59c92f2b95e4eb10d4ba0560868e2503

SHA256
0cc4698122875db36c407d11ae3bc04405155122793071350c82a92b951957e6

SHA512
f3b772876a95e7dc7542f87c8815bfa19585956e4cc3511e681016e8ee4b4986ac56eb69c8608b0b4a06b693242d55d84b04574a6501aef57d0f5b6d4600770d

Download Submit
/data/user/0/com.fclassroom.appstudentclient/databases/statistics-journal

Filesize
8KB

MD5
e05075b94a1d31241aab1f4f1a4b63ce

SHA1
f88087c33cc0564ccbfc343ad4b6fee1e9a5c5b7

SHA256
c9c60f08f82ec2530de155c8d1fb52a9c1cb8453dc4607c13828f31bf55814fc

SHA512
26fd7d9c9682772ef3bdc2c1890610b6aa4eccb73b830dd0a6d51280dc15930defa37de181417e063f5cd7ec0629b1d2f3389685c44083fa3af3d74df61b41c3

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145402AF-0001-130E-F59518973805BeginSession.cls_temp

Filesize
77B

MD5
c2323ad3d6fe17cd0bae69208d85b244

SHA1
971ee416e57786ba82fe003bc153f34744d5cfd8

SHA256
1752124d915ed17a7de74c9d992936f3477f11a5d4d348ef764c318402304f22

SHA512
07366b6f711abe883a0e440b2413997c52dcdfb1bc4ada970fd2a3c8a072828016e459cc17ceef89002e22c2e3f971a7bc0b49cb401873a9af237d44f5453bee

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145402AF-0001-130E-F59518973805BeginSession.json

Filesize
132B

MD5
f27f5ff560c8e5f3c46b06f82e111811

SHA1
38ab10b74d369077193c5bbb1e07e3ea5a56debd

SHA256
ab7ffc34edeebe4267f1556ef7e92969464db4ed62996081b9c3eeff3c598812

SHA512
28ddcf776d499abb5457943c64fcba9cca5b1436f274851998e30802c76e1b769bad22bbffec1aa5ed2fd421ca24477a5177e3614945c324b03aa6321f71b6a5

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145402AF-0001-130E-F59518973805SessionApp.cls_temp

Filesize
135B

MD5
b947791f44263b87b75b61185d337998

SHA1
33276c5d3b402cdea1317894b627cb019b57996d

SHA256
0259fdb3862c72c5ee670139bb748f23c0abd90b361edca79070122da0f1d9e1

SHA512
d264947afc294b8d0c096d0d7b2053cc7bf07aad71e0549a032b138f0bc9d4239bd70c4741a4f88ad98a04a47bea7cdec1707da670ca3b9ace3ef2ddf5da8560

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145402AF-0001-130E-F59518973805SessionApp.json

Filesize
248B

MD5
7743763d91c047cdcb970586297630cb

SHA1
ecd5c8ccea400c49d0208338ec793ff44bc3e583

SHA256
b89af3a571af922f70fdc1619d31249147c46017b69a759cd36a2a9a6fc93f85

SHA512
5b66fab409316f8795b325f00c4ea401c1808bd91ca9c9abe1f0b24ceff3f77ca055270c94f5d2bcde945703714ce8c4d06e598d8179ed13a4f06c115c82b7bf

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145402AF-0001-130E-F59518973805SessionDevice.cls_temp

Filesize
70B

MD5
b52b22309ede963b61957a0a039fea94

SHA1
1fbff1113db21a43ad42ba0dc23e0c7f0ee06b39

SHA256
ee7a69143acdee4900c0e7a34af7e856819ad6343dbed8a912911eb646a61dd4

SHA512
0f6fed6bcf63462a5c1ca275d384a7267418b6b2fbc0a378be7ff1ddbab69165bad45fe8f99b511c10e48743357a429b99506ccdf605e5436048aaf6fe8ba94f

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145402AF-0001-130E-F59518973805SessionDevice.json

Filesize
204B

MD5
cea190e17847586babb06db23116c75a

SHA1
3b3425579bc7e56ebf2d83b089c8c07edfc81e17

SHA256
679c508891e72355ab13d2d8f0c861910aa8a823aa7d54167c5ca7c75170f622

SHA512
44f674adb39e403fc4259c11bec7f25a952a1817f7735d91d068f037c4a11d4bdf382f67ddcd5203176406e6714bd8d5a2ad2136120b4274e8cf06dcaa7a26af

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145402AF-0001-130E-F59518973805SessionOS.cls_temp

Filesize
15B

MD5
b3d9541cc92a9153d14e5160f8d8c008

SHA1
2e1ac80eb381dd82a03795b682f92020348c0113

SHA256
1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d

SHA512
78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6640145402AF-0001-130E-F59518973805SessionOS.json

Filesize
55B

MD5
fc1dcee4e422d77e7fab7c08c8a41344

SHA1
d5340127e9d5f735b9d33b9dc61c772fb0e2dc15

SHA256
b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7

SHA512
3ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
483B

MD5
9eb9896e5739ce392de5515daff3a6df

SHA1
8b77b363202e3840888a52dfd2ffdcd9b9aa7bcf

SHA256
d4f530d480fd01b8ac5437e8f9dc6fe0d9653376ee7fdf4e05039ef5fc3ed409

SHA512
df0a3cb2abe00047d3423ada6059ebe7e63eb2838cc4f8ef5607ed11059fa8a4313aa19c8eb8b928a156637d1c029dd04563aef55903c9f10597c3694836e199

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
3KB

MD5
45ff684cc576272a585d35551b42ed7b

SHA1
c2522d6b86d96d1c56412beb298c0caf0a29c76d

SHA256
50b3451f0f79f127c586b252ff7e5605f5bb2ba82cff1ff1fa29845f8b714c32

SHA512
30fb7d4121c687020d65a4060ecd8cfcc4f8f88a0525272a3970138181341fb157d2e594cfe82bdd48e5bf368584993a6553d451eb59b2edda9261783ada830c

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_16e0ee2c-e381-407d-91f4-64c5293a6110_1715475541050.tap

Filesize
372B

MD5
06e246a91f93569d21e93a7e0133d2c8

SHA1
3a3e7c45bd25e6055362b5fb9afef7c97e688649

SHA256
1e97e2fccb9c8c49144f52511d1872c51d1f282f2372d0748a3002ab3a4e06f5

SHA512
50fb775452dde63f78a7e7410bf2f89503e989d22c09a6f56f324a753564488b3b9edc675909b8f8c763b68447040e012d4bf6c420c7ca7566f624051be02a41

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/jpush_stat_cache.json

Filesize
119B

MD5
91350802ec6761cb9586d9879ad74ff0

SHA1
b7f97dfbd396278154d059f6504cb202016b49fd

SHA256
c4d59b40a14dacb0234c07368accbdfb0fc5ce8c1435a677a5cbd2f6c62d39a1

SHA512
08cc72502ab27f3c19c6d65c0dcefe7b82ec83cd14e8918edd8511b91a3a19fd38e996a3a2164080f04e2edda03441c318584b9d968387de9ab6c91d56157795

Download Submit
/data/user/0/com.fclassroom.appstudentclient/files/jpush_stat_history/active_user/nowrap/704905ce-4aaa-40fc-949d-fa02dbba5ea5

Filesize
159B

MD5
17eb5640c2aed388593082e4089925d2

SHA1
a71f38c6444869a64d7037f08345fce0ec588c94

SHA256
096e49b2e981df6d9d4fe43b1798de0bf248122ddef5364ba0293d2becc32433

SHA512
85372cc1fb9aa5bc4bae2eef1ee1e159312d7ab317c27ccbc55a4fa72a6a03a90c926d5132266176f395d0c9b6d26a625cb51a73bde4b4127238498a67fd684b

Download Submit
/data/user/0/com.fclassroom.appstudentclient/unicorn#cheese#

Filesize
677B

MD5
6c6a7015b21b1a68b1cac3d25aab10ca

SHA1
211b1dfae3f93f4bf6ffbb9cc555a1e3239e9e79

SHA256
2b2d5118ecebb6bc30c176636c50e29dee4b2ecd508f6c6c2580fcecb5917712

SHA512
6ef625b0bc45a0400831cf09cfa8bff8e54a32fd4829bf9513d541e012a6d651550db23c811f584f484701c3f21ff7ffecbae8e417e50e874c2a03e3beb1fe98

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
2e448b16e9dd86a90ff221230c8cb851

SHA1
50726dc4e672c1f6989a2532c35507d4c362240e

SHA256
a3818a3de04a90ed703f6a8a7b0ee2be67d0d03b0d606a7991be5b1a385eeffb

SHA512
9a6e72204ff57289782d0149534da40753c9ed76ceda6bcf64fd6b810cb42415da751d310ac8de90a631d5e84f475822cc79438940bc24d11fe419a085ba37d4

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
fbcaac36dde22c7c91cbfcd09915c0c6

SHA1
001c9664b997fe6454d4de8f1c3cc47e4d8e460b

SHA256
029c71e1783902cb02b0edeb662bad5f1b46f8259ecdd474e887c47beeb36262

SHA512
ee77468e1474592f6c3833f2638f5633d9de80732bf72d65399e8c7bb18f3eb00286db88595936ca61e3119ede80e8779138306e514a44efdcf61ae64deba85a

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
167B

MD5
365126aad3ccda7ad59922794fe71571

SHA1
968a37e14b3d77cdc79e10630c86a21ce3fed2b8

SHA256
4531ef427a48ca7ae5b6a4f02ad5df89841fb2a4fd9cd70a4e6926e3f18ed475

SHA512
dd613302d41b71fd2aa352e7da26307290ddf320b7990ffdf295c32d1be651b1ee1a191754cfc8e06ea104af005485226362ab60cdda4a53a0bad40d38772b07

Download Submit
/storage/emulated/0/fclassroom2.0/log/log_2024_05_12_00_59_01_187.data

Filesize
545B

MD5
a2c2e1628e80421c4a4e46335d10f2f0

SHA1
6284b6b0240a71ae642f4cf11e46dc7f309d1c0b

SHA256
50036a660475b4f8c54baaa758e1cc3ceec38e2efa770a8bbcd76df563e6f4cd

SHA512
e01f622dcaf9544dc00d28c9144e22a575a70fa29a82a5ef2d2c22f81fc510d32766d7a72d918403a792da34596d86e88e0e26277357c88576d4612ada4d6935

Download Submit
/storage/emulated/0/fclassroom2.0/log/log_2024_05_12_00_59_03_375.data

Filesize
631B

MD5
83a8fb7366bf0e27b028cf2a4b286349

SHA1
7fa4fa7fa0a4ecb66bc1f73639677cd5d03aae25

SHA256
8a3273a875aae8c5b1af94679e8ec5e9fe6108a2507eabac4d93afe40503f98b

SHA512
8a0215a89359e18b9a3877e5d9895cfcab2988948d92c30fafd7174dafa426d1748ac05a897c6c24827ec74b82b0268078fd9b15e470ba2e6f95003772ebfd07

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads