Analysis

  • max time kernel
    29s
  • max time network
    154s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20260708-en
  • resource tags

    arch:arm64arch:x64image:android-33-x64-arm64-20260708-enlocale:en-usos:android-13-x64system
  • submitted
    22/09/2026, 12:24

General

  • Target
    moodlemobile-android-v521.apk
  • Size 23.3MB
  • Sample260922-pk183sec53
  • SHA256 96fdab4bc72376f4a766a1fe47f70e2306391ce5246cda7eff5486f697f8e61d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

Processes

  • com.moodle.moodlemobile
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Queries information about active data network
    • Checks CPU information
    • Checks memory information
    PID:4088

Network

        MITRE ATT&CK Mobile v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MoodleMobile

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile
        • Size 104KB
        • SHA256 b4f3ee5eada16c3508a176b222580b364707e521015bfdb4d49f516f477f87f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 512B
        • SHA256 7796bb4305c55e627d51dca7fa55268edc0205161c8e670bb9439f4bdc8d7b53
        • MD5 SHA1 SHA512

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 79cde3b20e8edd8e74845b13cfbf6a7802cf1c5804b3fad0551d073fa8cbab19
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 846cfb6c0e8eb018e5bb997c5708a394eef99008f4582b4499b46aca8d916142
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 68b2743a225cc141c9b6ab6b9108977cf28344ae4f8b81cde51b7fb57775b384
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 4a64f5757c18e36b2b5de937350a64439aa23e37821d50801a33fbab0a1746d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 11fd5df8337d97d849079f41ecce3b224c16e7f846f20a5859d0ae6c734657f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 4948bdc00c72ca948dacfc8dfe747bc68c0fd0723e5703b3322e086d0212ffb8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 0af6c6eee6b9faeca24cdf7395c7e3c7187dc8637daadd635b87df1a6a6ea0d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 1b46eb2e0cd7ada22b1d107e2a12b3beed3d4b0b39a07602db494c59969048cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 307bfbf112adc101b493bf6c2ab5c94b9b41bedb50c4ece55a976d4c075e636d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 3e0d774c7b6d9fea553ecf9854975747c6621ffc92ab97767c4281b30c23e457
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 ff475f6ee983dfeb53d3d44a1836e9700fd014c6630e96633b720b88c13aec64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 4KB
        • SHA256 4879020daa6c6f553ed679a8d1a4234d3e68db357d4c66405a50f3b9fbc96b21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 f3df785714d0a5ba7abc3c605adadee9cdd08300d995df7f889d106778a620ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 552373169355e8a24322db2225ed3f3d15e574c88f7697ab3907187cb1b7863c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 ca2f3f4e64d3c11a21ed86d712a2b0966aa5faba2a0916b4b8c86040df497ac8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 8cc5a56fb266a94d4893961f669beeebb8edefc4021a6d73aeeb00cfc7423003
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 db39b8a6d7dc0808a0e820bc27a3db2792af2842722905fdbad24fcf5861d463
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 8c543746f8007d76b297e4f93626ca433efa7f1ab8cd63541820b7f6e6f600e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 c640b7bbf9fbbcd04ff357f8b47e757c67aa440c224551e18f14e5cc6028cac2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 65ef72afa5101b4f93d04ff156faf927dceb02ec8201aeb9d2602141cafc93e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 eba917613a663f6fb10dde9da2bc681c27c3a0ad3274c372439b4b358ada205d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 be725c3562efde458be5a34097f43d51720a217a3919b4929be8398bcd2cab2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 1285ab58a72717e9e6e999a90927000d19cbcbdd4eb925133e3fad9a0f723ec9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 b217fd0612e92709406ce86934ab011aad82d9c3c9b41659f4604eca7065c2e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 36e740ead4efae6f0a6b3b6a8dd120ca3f0a15377d320fff3611025616040fbe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 70e0b1a6cc9f59258e9eecf68fb51ece261b3e75e5693bdda2c555ed164ce888
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 836620bbe9de44fffbfb5710f088a531adfc690f5d04756e19205cdbe0fd265f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 b980ce080fe1310311fae6bcd9b4566a223b6afb21a9ea946ef861848ea459c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 436b84f5d0be843eb026f5c78f0748472490d9e4adde95a4ed6953b639247d66
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 795312eb35c8752d12ffd645d3beed7796fb01a656887dd6f8d852ddf3b88039
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 2ed9c29692145a77cab8a95cb172a4d8e0bafa0b4464e8632730148e8fa0d809
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 f6e5cb90284fe4f8eae3bfb981ce192453928ab93991d9e488c2f70eecf5c1e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 3c2ca60365aa8985f97cc7135b64d5defd575b93516e3f958a1fdf2afd20a8f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 2fd623dc31f43d23602b6a09304b63b0a200af2521cb2e5076a29c3e21ecdde3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 9c46b24a5449e82c4af8a1fb15c8009856e1a35be12b12c9c87dd25130ba039a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 d43c3c97f4f92ec3890e3ea9c71ed4c2d4daeeba2c0a0335b42b0bcb7e8963e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 0f3014ae896bfcb00c15bfb5c5061bdd4d59c30c50baa98f924eccfccae1fa6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 689e1ef9c9e99e6957a68ec6391dad28bb53d9d8c929aada3f75b53fe9d456b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 744a6e147cec1f7ee336475c3120cebb9fe668cd722c5efdbdd763b2fc64f06b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 0d154e0fdd938d9b5d630f8043a5756e01f34d48a4bdd97e49751a4cc21490aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 4fdacc1fb8467db83929f6baeea45330218cc105e0d68334eae6ab8c6ff96e95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 92e04ee46749950031dedff47550d5f8185027df1563ce03ec9ee169225d801e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 e84ba41183c16e7fa08048cd28fedf9ba559966a36234d7b324693eb7f4d4f4e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 81187d1264f8fdc9a07e671dc3787da7c4078392d663bd0e59f02295aaa3ef99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 1d1c94f89e9594d8722c7aae72f52929294e1f0a3bdc9d7987273a9b9e4c491f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 632b4e1d79a517c49187584262786b8366093a8a0102ce5b89297b43ac94cebe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 2031a922397321f756fdd0adb10df5a728623efb2c8e0d0da05982e88efc5aa6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 eca54e2197ba4ab560720266e86c6430de4bbe9fd826d426184ae567e63bef21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 3b13704da7d295e6ec39b781f2ac292e492301bffd9122acce431a3653b9b8db
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 77fe4715068116cfbde94495fecab202bd61c81c7b7e198728b5e13dda80ba36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 09461abefce278a57f2124e3ce8a3c1321c7b8155f6a6c53b6ea01e05b884956
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 3b4f04eda7376452310e7adc33cdf50b2e1ed69057e29ff16d987461e3c1c37f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 190714669364fa25c988183b31bf92e5314ca7775ecc0eed26fdd5a97c0006b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MoodleMobile-journal

        • Path /data/data/com.moodle.moodlemobile/databases/MoodleMobile-journal
        • Size 12KB
        • SHA256 1b6d406f7d42fab2617b88d6514b6beb18dc892494f13f094c679ecbd0698f6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events

        • Path /data/data/com.moodle.moodlemobile/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 bdcde56347a55e38886048adc2b2ffeb738a4e37a6ebd973cfc9f9a54b15634a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.moodle.moodlemobile/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 9c293eed1d2bdb3ee8a61781d78791dcc88c750fa6dd694e183fd235d15ebaae
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/com.moodle.moodlemobile/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 1dc6fda490f88541ec92db483b6ef788438a5240bcf246a06eaa7ca993f5debc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        com.google.android.datatransport.events-journal

        • Path /data/data/com.moodle.moodlemobile/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 b06cc28ec1f2fcf7e0610ec01b5b527e622e5a6f12711cec99ed3aa1ab8f9394
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PersistedInstallation5402141671959147716tmp

        • Path /data/data/com.moodle.moodlemobile/files/PersistedInstallation5402141671959147716tmp
        • Size 90B
        • SHA256 81ea973bd452bb78ec4bebb896dee2d9b35621ff629e065b26db9e4112bca3d1
        • MD5 SHA1 SHA512 TLSH

        PersistedInstallation8118529460920718498tmp

        • Path /data/data/com.moodle.moodlemobile/files/PersistedInstallation8118529460920718498tmp
        • Size 561B
        • SHA256 e96a65afdb18a0a1ba0f51c9fcd8b0cca2295567c1da50ac14fc9a790ed78994
        • MD5 SHA1 SHA512 TLSH

        profileInstalled

        • Path /data/data/com.moodle.moodlemobile/files/profileInstalled
        • Size 24B
        • SHA256 9f442f4d74c854a0aeeb97e0cd7b8dbb281ddc75d790345f31f750822bd9aa51
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/com.moodle.moodlemobile/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 9fa71d17820501877cbe812549ee4bb7b4c516ee5d456d8fca60f2d573f6b719
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/com.moodle.moodlemobile/primary.prof
        • Size 2KB
        • SHA256 1967c38609787d0e19188cdf17af210af9307e5995aa913a0062780a0b97e8f6
        • MD5 SHA1 SHA512 TLSH