6ae676a4a68dcdba0dc61a5fd79f1cf95698c1190ee759455e9d5b56d6588bef

Analysis

max time kernel
122s
max time network
154s
platform
android-10_x64
resource
android-x64-20260325-en
resource tags

arch:x64arch:x86image:android-x64-20260325-enlocale:en-usos:android-10-x64system
submitted
08/10/2026, 12:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
jlearn-android.apk
Size 4.1MB
Sample261008-plhhcseg66
SHA256 6ae676a4a68dcdba0dc61a5fd79f1cf95698c1190ee759455e9d5b56d6588bef
MD5 9a74b910302aca3a7252c0b6faeb6920
SHA1 2ff7aa1d71471bb3d552d748bd6a19ef262be8cd
SHA512 9c396656734ce140c526db4ffc41a87d3f8c5221904052b764030e9b9b0341d0661c3123a742b58a3fd2d8cbd7cb72cd2f6db1251dd4669a5a90bc78da889ed9
SSDEEP 98304:ldKkMUKYJlWKwr7kgw+vppGdmEFGOisJkGFJZgzgC9oXQhvf9m8ig:/KkZKYJlWKxiemEFGOiUBstdn
TLSH
T13C161282F7E51C2ECC7749360F8B5A3147129E13CA83D74B89A4362D2D3BAD84E55BE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

collection credential_access defense_evasion discovery impact persistence

Malware Config

Signatures

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.jlearn.edu

Queries the mobile country code (MCC) 1 TTPs 1 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.jlearn.edu

Checks the presence of a debugger
defense_evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.jlearn.edu

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.jlearn.edu

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.jlearn.edu

com.jlearn.edu
1⤵
- Obtains sensitive information copied to the device clipboard
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
- Checks memory information
PID:5045

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

profileInstalled

Path /data/data/com.jlearn.edu/files/profileInstalled
Size 24B
SHA256 7a6fd105642aa836d936290c56c55b499d87e8ad0e3d21ca1a7f31ef25f55032
MD5 320b40666e2373cbde773d37a3c2ebf8
SHA1 8c1d45973bc193c0d8ed09d6f015aa0abc56cb51
SHA512 48c30e71e33f2401ad9b9a8a3f658c677e166ae3d29874369ed3f0fce7f754be74cb2113d4e117d032ddb35a920440810c30a9936f3579fc79d4a2db3bcff163
MD5 SHA1 SHA512

Submit Download

profileinstaller_profileWrittenFor_lastUpdateTime.dat

Path /data/data/com.jlearn.edu/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Size 8B
SHA256 7125f12c6f3556ba61bf822f4703ea52ebf3344645db9645fd9f4ddeda03cd67
MD5 1709969e0ce5fa336bd358f675f7beec
SHA1 3261047982545e3b72d5e547fe31a7f091476cfc
SHA512 cd9935255f7eaef481c6b6785f8bd1fd773fc5ec6ae579b1a4982b0b78fcc9bf0e01f005b007cdb1709b070a996028aa74f16257ae1230bab85e2f52e215020a
MD5 SHA1 SHA512

Submit Download

primary.prof

Path /data/misc/profiles/cur/0/com.jlearn.edu/primary.prof
Size 2KB
SHA256 f841748b4508129a90ac2685a81772a5c1b6ef7f95dd6a600788f8b24c8c5cb0
MD5 d2bf0da15aef417b2cdb200773dd3498
SHA1 37f3b7cafee346b15ed862ddf2f1fa409f9628aa
SHA512 e625af1a7748bdbe81ab98d40253655996c13f1724463b53a97ada8d996a4002bbef891fb69dc18b83d77851aea09155f42feb094a4715bbdcb0b3da73cec06a
TLSH
T17C511AC481784D845D13A90DD1C3A71EC5E30C5143EDE72765EFF6DA8E8A5BE086630D
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads