badbazaar | 549d726fe2b775cfdd1304c2d689dfd779731336a3143225dc3c095440f69ed0

Resubmissions

29/05/2024, 07:44

240529-jk595sfd9x 10

20/05/2024, 06:02

240520-grv2msfc7v 10

27/10/2023, 07:30

231027-jb7fvaef28 10

Analysis

max time kernel
1880572s
max time network
151s
platform
android_x86
resource
android-x86-arm-20231023-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system
submitted
27/10/2023, 07:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

signal.apk
Size

79.1MB
MD5

76351b5e3b9487b0b39759dbfea5f0c9
SHA1

19e5cf2e8eed73ee614b668bc1dbdda01e058c0c
SHA256

549d726fe2b775cfdd1304c2d689dfd779731336a3143225dc3c095440f69ed0
SHA512

0f858b36e47012737de9ca88399a4f95740f6ffc3639b5134aa418ccee441af905f1e503775fb741cd3def7931db18b517a8b2f07c4f0576f8f79ff9fb3f3fa7
SSDEEP

1572864:U/u4rrAgdZh87ZlyFLSnI8LcejgNtwQYpxtIwTJSzslunYuTAO:UOIeZBI8LHUUxlT4YlSjTb

Score

10^/10

badbazaar evasion infostealer ransomware spyware trojan

Malware Config

Signatures

BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
spyware infostealer trojan badbazaar

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.thoughtcrime.securesmsplus

Reads information about phone network operator.

Removes a system notification. 1 IoCs

evasion

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	org.thoughtcrime.securesmsplus

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	org.thoughtcrime.securesmsplus

org.thoughtcrime.securesmsplus
1⤵
- Acquires the wake lock.
- Removes a system notification.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4275

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.thoughtcrime.securesmsplus/app_emoji/.version

Filesize
109B

MD5
30b2f63ebcc953f53f5d05d66674e776

SHA1
05c419d005a6c009c39d9284a07cc7ee46751dda

SHA256
822b87884f631827642f9c4b06c7a8c7db19ab902d897140a3837ec8f428c699

SHA512
34c3f84983bfdc1a370eba44560ef4148ab5a18619dcd61e820f70ff8f16cf10cb43199071ddb25c521bc723cd132790613c2754ef2f1c34612f725fc8a50b0d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/.names

Filesize
169B

MD5
5e73e7b373b046548c50536e2d66fc19

SHA1
e851b9f1e1a06b530a09be34b2f27e0c1527d690

SHA256
f80ddd503e3f5c9608c1a692eff811fe6b1ea3458f3165a87ef241c34b1b543d

SHA512
a2c882529905c21de6f07bc2c28252418a45e42e945d53bd7a686c135a92e7d87a60a37a4792e4503b1e42b13690ee2dd428bc6847cb6511c03db140ae02aae2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/.names

Filesize
235B

MD5
fd594ae2231c683ac36f5c019aaef890

SHA1
695a1a511a9ee8dd12c701fdcf849227dca15235

SHA256
0644d779b19e7bfc0ac503bfe582c8a49d9d8923cf388bb2851871ca01599b33

SHA512
b20471c250c3d9403aaeef5b0b7431aace14c6922ef8875385e0ffa28f051c8829af22df411daff8ef3127fc5985c8bd7ed785e35c616a0c37e7a02d808cf545

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/.names

Filesize
301B

MD5
e6e7f3763c0558cd385854dd59d495a2

SHA1
6dd5862c0e74f320db291ce4f0147e0d93491788

SHA256
3798fc7ff155541b47d3dac110e764752d7c58bec812e84bf1743b12aef40569

SHA512
76177f17ed82525c0b96d5647471a4e5f24c4c6bd19fa6edfd23c079b6c134bc01f982faafc445149238ced00d34c535e4f039709bc385938e88fc7cafbd325a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/.names

Filesize
367B

MD5
380f954dfe23ed891cb37952493171d5

SHA1
bc18fa023064a52a4bf232b2571fd92e6e5a5bc4

SHA256
00e5fc81cbf996b204e88114160f597344456450404792dbd1ae0d09b61fea78

SHA512
7071a2d0ebedc7acf1a44c2a1f858e6f0c28053ea3d365d86db85fe3d79e9ff8e1916a6e766110686b73911c1f950e00a80e0640de14c7ca53491f00921b91a0

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/.names

Filesize
433B

MD5
213e839f44fef0536c9b54a46875af9a

SHA1
cea14fb104f5f7e0735a9f1f9b5e56e7ad935841

SHA256
038960373eda6f44b3b4d047ad38aa9dd537765b8cc708e071d41f10ab8efa62

SHA512
df371b44cc99ee5dba83beb498164fa7eca10ef0d8ecd8f905d9c30870342d31423bcd677c2001ca83f935a9b115ddcb5c7fc3559b5eea45183e23d19ddef1bf

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/.names

Filesize
1KB

MD5
650e13ad52b7e9171a44f4920135b419

SHA1
d15b5da39ad5b12e48eec351c956c658a2387ded

SHA256
b001d3bacd0d44f16412144bb04aba97e69c2e1f5530a74681e03ecee322e9a3

SHA512
c8bda10e8a8f6e3d9af79b6e0ee3a5dbfd6c5e246189eb6937beeb43d361cc339ed17abb4cdf82055d352ba85915fec16ca9e6db9867972bdd13294e0b3986e6

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/050af6d8-b240-4781-bc08-0c137144153c

Filesize
228KB

MD5
ea15ca72ea19a570a685b56c310ff677

SHA1
d6a0c798d7728570d553efb4cd5631bbfdad0b80

SHA256
f145a3de27b640aeed93bbe01081585dd05db8751afac39cca31bc3712bb4b46

SHA512
a16d834395e1860bad6c2738889055ad316f244eb0d46008ab64de232bf3b679f8fc3c623d502624854e6e527736f7cfa55f3806d04b170695c6d1166a2a4e47

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/1d3f0206-570c-4ea9-8181-770f2ea5a15c

Filesize
161KB

MD5
fb645b86d3bd8867c41fc63b7574f4a5

SHA1
439c668a5f3bbde612699c12e6f7eac1ca46392d

SHA256
a0b78766b1da6b77954efe0f13145f3a7ebda4153000f926b9da0e0410aedf71

SHA512
14b81c00143534bf60cedf9d45bf1ddafb69296d9858a93509eabdd3722b0fc454e126e775fcdb015f2a435b7ccc94ceb7bb2bf17af2c92d0d931ca867c466c7

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/2b51d663-65cc-4a09-9f82-48fd90a8729a

Filesize
161KB

MD5
1409217bf69e964fec82ed5581006780

SHA1
77a8152ed7f5cfea9aa43e9abb24328265a38bcf

SHA256
32abe954f13abf674a77480acc12bb0f24f12cda85ff0beef1af65182b9a1175

SHA512
ed5dec45088f45cce0f10a95ef6cdad02b38e5724222d33124d81bc9ec4a3a369452e04c9d557021458bdbfe2d2e79247f5342fa7680a91286fe27d0d1ae05b2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/519b6169-ec87-468a-ac9f-e324fec59217

Filesize
78KB

MD5
b2e1909f65fd66cdbfb379f34f7884fc

SHA1
8a80c208d84110c5a086395e7ff5bba71e26726a

SHA256
3f6307314155d3fd65680c4fdc10d2d740cb6ded72a29213533739c10cc86bf3

SHA512
186822991a92c567317b8fd26e611166a5a9fde181464a846cabbbc22736fb618b84276e9ca70e5318a1c68b23bc0333c743faddfeec5810470cb20d77a3ca9e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/6537461e-7521-4697-b872-12102f12cbd0

Filesize
214KB

MD5
2d95fdba7391ff4bc42ddaf4dcb17705

SHA1
7cc4930de39580c4212dc8afaeb9f08d8d43d08c

SHA256
43b218c9dce147710bfd5870f6f2470e22298964b903509388c03a54e0c36059

SHA512
41bf807ca03697dbc6e38ece9b96c35459cd7260d5c8ec583fb41b71727f7fd2b2120fb3c62c80ec872305faa541ec61b13033db7bc782eb82db85c03f3f4dda

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/7ce3a4b6-ece6-45f1-b00e-33868a4460a2

Filesize
147KB

MD5
23d49dfdc15cb34eda577544f83b1c6f

SHA1
5e5d4ee5dd98410447ef75004e278db0b4b68e15

SHA256
e62c17f69402cc0453aa66edaf2d94018a6fd38b41ca10b4e7fcb65c5ccd23c9

SHA512
5eec2a38f70b48559d93bf271bd517e3d701f5dd0d1a1f9dae4d9fa2dc950b6eeb71e379ae09939996a7200c03fe2ca1c98d1d333bca24715600d341c1b273ca

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/997851c5-a262-4f97-92cd-3e38939b5c0c

Filesize
278KB

MD5
847b889cba233848c310f7183b415842

SHA1
7c4f54cec04c484ef0e7fea4f48f13e2b5f9f5a8

SHA256
8f9279acebd25f9361e8a1d3f4746c36b6d6725b8760176e98639023730fcdc6

SHA512
a5747bbd2da72c2300da3592a63afc13d7fd7575c05d3ff8ab73896ff4b7523f7d67e10cfc345f5026bc7630d523599cbcaf114c84ee8a1e03b678806c362331

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/9ca8b633-19b5-4c1b-828e-4ee979403ebf

Filesize
264KB

MD5
72bd74cee349b72a4934f31c929ec4a1

SHA1
dd4d64efcdfef82f0e55071c3a7e94a4a30eabf6

SHA256
07cd18da58bcee988128f0362ddca8e5896e4f55d25a2fb2ff87228892f14651

SHA512
fe2393e0d9967c18166aea8a4754882528ef50341715432bfa04f2b6ed141e5d5b76e690c6714d3c43fb68f6f7210c2fca14817aa89ded6b70f2ecadee9ba135

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/9d7e3e52-48d7-4098-aa13-696cfea66e3c

Filesize
157KB

MD5
d15868d570baac1b644832ca2f7fd1fc

SHA1
fed9b564ee5144dfacdc761da9c66b378ff74e12

SHA256
bd0ac6a7a498f07e628ec6889d8339a6ada27e575ff5bf8583a8fb2d6c724196

SHA512
f35db4899c7393bf8374dcd655eb6f0d5176b31b6a96f552cad77bba5d41a0f6da138cc2d278dc27b2a64b810bd98a562eb69908b996f741c0c48fd7aa2bac5b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/a8f6547b-056d-4d47-b8d8-bde743262518

Filesize
76KB

MD5
ce9fbeb61506e5ef458ff58aba1d992b

SHA1
a9cc6f1c6e5e2fed0f86feea0c6ff9411c74e859

SHA256
cc624772e407621de88ffd0a8fc8ddc2746156bdd24dbdb66d023891fff447fe

SHA512
e392d0f1500a3dde089f4c5b0f2fa08be1421229ec269f550c97d2482c97b3ae33fcadd7bb78ed4418ad357c9f350fc004bbdda1713929a96927ec31ff4dae89

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/b0e8471c-2ba9-4ced-a476-a0b75f667f07

Filesize
117KB

MD5
377131b8feb84f8aa01662da22d53c01

SHA1
04908f2c582883c02f7914298d7bd12f2f5050bb

SHA256
91c655d9232b387c0e5ba257fb5b225c1636757b9c37482e1f4afd1d9aacede7

SHA512
5fa4a0a6a5c6389ab438ca195ea6ff2c642244e9dcbb89eb55451b310c763d9b74462d5fc7321e57b0af5a471d1e7c3e2f61675301511e0ff3d4d75a0f83b85e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/b46c87ba-648c-4d45-ad65-54a2818c6e77

Filesize
246KB

MD5
ebd0ed8ce188fe1efd33a0795dbb2df5

SHA1
06afcb965a4e7ef387935b994d8468f6ea134877

SHA256
68c0ce672fe70ddb3e24444b1777ad7e2290a33121306aa5afaff17f8c7dc83c

SHA512
e0d60c6dafa0bfc7c2ad8b4552ed6613432004442749a2c671ee5c46e1279ce9a9bea204955e71427754cf86fef28a28cfc1dd9a42393137192764070af8ff4d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/bf731353-caf5-40a0-9f74-a8fadab67240

Filesize
170KB

MD5
04485ee1471443416279a71caa56a46e

SHA1
aaf62d9c0b6284de0de9a969cddd247b07bb6b5c

SHA256
413f038ae68fef99c65e2ca7b8959631a5c70099d5da60843231458e4bd11561

SHA512
b926eb42e21a25f4f9a4caef250f873918f9d2bdd170aa91a7ae1150052002a94f9c1d0ec319b1fc242c973a21da72af8e20a806027a022b033d5da7c522008b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/c9187746-14b2-4641-97aa-a9200843b05d

Filesize
148KB

MD5
f047f7dca1528e15f290818e0848d290

SHA1
96556f7393396fa67112ded52245500cfa71610f

SHA256
12aea8ab29c9c28d0802f4f288289bcb685fa627226aca07d3c900e995ae16e8

SHA512
1301e47578c0f0f6f62ad263d0b21a49eff9c2bf47aed75a1ac8036a04cf6e9ad1aca68b547b268b8eab195c487069609f682f5c6360e7a3c08e4182a9c2de9e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/e030b56d-d688-48bc-b9e2-18b911835b5f

Filesize
161KB

MD5
4d66595a5e4dcf3e458f6576d0e32144

SHA1
f71257242101770fe5367fd9b75e44da2ad07bf1

SHA256
55d619b635d2536889680d70a90fddbc444274c2b294c985eb4c0ae8db5626ba

SHA512
47d593e59d6a9c47215d17367e15618a84ba3be71afd8cb6b995d0d5e2c042606f8474b82bbf7a53e12517c6675f0b87e3596098d2540bab6944cf101b2eda85

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/e1088d87-f817-4766-9919-d757c37eea6b

Filesize
250KB

MD5
2b7d6c7ff1e5a45ab092683106c6af03

SHA1
3607c5df0eb1ed51d238a929003a928af95fc3f6

SHA256
abc911efae6b049e12274204f2c82f04e840f03dd5d87c6130fbb43a897a26f3

SHA512
89b2535fa5cbb5b1707107dd77a164183e2fd1b254fa955370a2c203de8930be2932efe67e6391d7ace3519a2e8fe026f92f98266c002c58f6bdb36d918102b1

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/e18c928d-3c6d-4ecc-ad50-b738a9cf36b0

Filesize
238KB

MD5
f3527f98596d9edf1919d30ba4181fc8

SHA1
8840c0eb3daee9bc3501187dfa89cd46658b4c6c

SHA256
26a6c162699e6d7a01abf444a2aac0a611380adbdde69c44235a7b05584c7a92

SHA512
0340187c02cdffbd9caee77eec274ac4247801d1b02cc846552942ac0c8bff7e3dc79a58bea6de8eb1e4c7cbc65f1f59678ac6073605cfcc8d2ad89a4b2f105b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/e5c50250-4a0b-41b2-85bc-5121a2611f63

Filesize
144KB

MD5
aecef8fa3dc4cfbf1d723681bf7fe6af

SHA1
0b03c75aa012ba8bc385c6d21fde46bdb9d5cc40

SHA256
735444892f5417f3dae20d1e9d4a849126aacb865fadcffd8fe7a3801b5c200d

SHA512
3b602a99d9306c8571d9a0f2744ec6cf858699b14573fea12fa0c69ffc0665b0d8c8151286a5b59ec21060c05b514aa8d32b2de83ababc8a25248ba54732d60e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/ee6a27fb-7819-435a-b69c-9009c246724c

Filesize
246KB

MD5
d4e8865d53ae213bdd18ec981a5d219f

SHA1
85034b4dd1f06b93522b2fe6b54fa014ac16b0af

SHA256
350ee5c7a520c0f970d3a919a681f5d41b20e82e11062b0437688ad2b5836338

SHA512
f72e7e8e9531f3a172cfd00f16fafe02eff742514754a4e2c4724d729ee93fc5f4a79810ad007027ea3184c0a74dc9b16fcdb802854fa99f4c83120fcf658a64

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/e358df41-fe33-45b7-b973-c7e3ade3da5e/eea0114c-d8fa-4051-b9e8-04e56179965c

Filesize
288KB

MD5
a249d976ae5dae78d2d235775e0df34d

SHA1
4460683065e3ffc444675472d30b2dd3e940e711

SHA256
76974556a5c0204518d645a1ea0101cf6f1813d4cedb439f5561d069e364e9fa

SHA512
7bc91f64d93c42a20de93e216cd467eca6bd0f177ffe104911b73ffcd17e533c248c9af543cfd3e7f283234608d5a2a98dfb7bd721435abb3dfdb317962ce07d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/.version

Filesize
86B

MD5
68cd19dc9d2057043cafe187b3302be7

SHA1
f910d31fbe9258c95f8c60dffa9a535f497b715b

SHA256
f530eb61d3a267540226ccee0c068c34445041b4bba97ab033147822c6f60ccf

SHA512
32f8765b5a973edc6c52b0534176924282562ed3cc52503143119b68f5e4c28b729f36dece81c32aaad0fddb1607fef10730ebee3cb90e3820d8fb2818c6bb6c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/70f7487b-1e99-493e-8da9-052f4dbf50c9/.manifest

Filesize
498B

MD5
0cd6f8356a4930cdbac75fce3867cf4f

SHA1
2bf29b382d5573637c43c7077c24572eac25ac6e

SHA256
5cd3462d4612fd7f9dd20a03ca781247a4945a73889b4ea626562d122cc03275

SHA512
af0b34f7e30373144df4d23177a6e037f51d4da93886eee715f07ed7057393792d53ca904ac87a61fb5dea07f2e846a5ab1fba23941fc8f6a1001ae4760e7679

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/70f7487b-1e99-493e-8da9-052f4dbf50c9/.map

Filesize
99B

MD5
09da22fe968beaf74924dd175ccdbdda

SHA1
25040940b7926cc0fefb643ebf96de6b94e37664

SHA256
1e64afaaec816c438aec83edd6c393da970759e70e00d06793c1f104cda8a792

SHA512
99e39359f290c514f5db3c8769b30c6a372037290871c0607d65f09c9c1d8640affd8c8ccad1c843fe3d06e5e23499f504e34ea8fe59721963570bcda873a265

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/70f7487b-1e99-493e-8da9-052f4dbf50c9/.map

Filesize
98B

MD5
ccc3cbfea0eb0c430f51a8ba1032c892

SHA1
e3c826aba57f121c7a9b3c2668633add19c38f57

SHA256
88f46e7fd11810fb5dda53af31dda42e34b88d992de4f4e7f7c5b91b827a7a1f

SHA512
0748b89a3d038a007a0b24c2f6db4a13ce99db765f79aaec1b244ee7c62d7fc97592d6584aa2280b3928d5cd7927877aecdbc92754196ba6183600036ff732d5

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/70f7487b-1e99-493e-8da9-052f4dbf50c9/.map

Filesize
162B

MD5
f32e4ece1632360618e6b197692d5eb6

SHA1
75568f271aed39eb2d28000e77f0375781c8f2ed

SHA256
a4c811d170ebcbd632805e7a90dc41cad1ca9361229329059cea1bc5ca820ef9

SHA512
58f333c3f7eb8cb5ef17035c8d1e359495656caea53d549707cda8f85cf8b30b52e5ad54766cefea660a55b9303893ef01518afd9269a28fcfb2a057dab890f3

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/70f7487b-1e99-493e-8da9-052f4dbf50c9/.map

Filesize
230B

MD5
e93bcc8255c744e58d4f4c663f81784d

SHA1
cfab07d27d8f020e0649b438a22cd1396769dd96

SHA256
7ffab4c43381d859f75040c5794538f3098af412b155378be59575151312071c

SHA512
91f853343bdff6697eedfeae28e1a3ba5b87375959013e9c5510176a708ee80f585ec2ef6a24774231672eca031bc214883f43272671633d075521e841766a29

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/70f7487b-1e99-493e-8da9-052f4dbf50c9/.map

Filesize
226B

MD5
ff151bc87833a39547b43df54a5ad1b4

SHA1
fe6bd4b77cc83ed16cd3fceafc03adacbeecc9cf

SHA256
afbbce898d99b7651352903e3f3ff9049a2e59f06c63ae1626636e50166cf398

SHA512
5e0a87a75aff492dba8cc3f2ba0a8d7712bc7be661299bbfb70e6ad665b4b87cf12a1d93a7504332f471e4102286eb159ec4fa62030eab6ad5260dd324ddeab5

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/70f7487b-1e99-493e-8da9-052f4dbf50c9/0a707578-63ed-4160-aed1-3856e017afc0

Filesize
56KB

MD5
ad4cd34327721459c11a67b4332c945e

SHA1
9c0742c0bb82288d984a37dd2642f1246e599d17

SHA256
305f941c2fab1d6ee97c5a4460f8653ff4ffec429701e2c9648befa1f593a345

SHA512
0e77745e3cf711c958e443b6b2b1a417dc88023ec1c668a0f7e1f7944c54abe78015a8a94197353ca486ade639352f3fc4e1edc215191b7e7f6fd9ca2f9fcf24

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/70f7487b-1e99-493e-8da9-052f4dbf50c9/4ddf226a-6d4a-4b45-bf47-f4061586d29a

Filesize
308KB

MD5
c6dacb6bcfcd747bba440bf2fbd2c85a

SHA1
ff2d9fdf17ab9adfd7cd41a75ef0495f11d27b56

SHA256
3c163d15b129e997225435c2ec3544afd57a1082ebb12f87a48600f9a1c74869

SHA512
6e7cb6de0e690bd8792d12959d1589020b1ae862d21ed927aa7f683898b9cecd2c8b813035b2bf3d99654cb70df391b16164d43f29e049e5666c6c931cda7d56

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/70f7487b-1e99-493e-8da9-052f4dbf50c9/550878a2-e051-4911-bdc9-328fd520fecc

Filesize
307KB

MD5
1aa99aa25c72307cb7f16fae35e8c9d1

SHA1
17ec5016a5f2b2ea4f27f7bce1df4192d3590161

SHA256
a0b1f949528f7a3a2d2ff3b6df67c6c1b5cb8f62a2eba6eb5e06adff2d5795f3

SHA512
1a8f5535e76188c25bb2a4c046184dfbbf074c56a554083e12268c32bb11715ca6f70bb0007a1b5915a80759c4e11060f3f599d53a45c2e7d6b787da4244a578

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/70f7487b-1e99-493e-8da9-052f4dbf50c9/6ce23070-3bfa-497a-b368-a4a6e40d89c8

Filesize
95KB

MD5
44850ec0ba405c1c5620ff156b3d624e

SHA1
dda0533f8a46369c980550d9a9c4264d0c90b60a

SHA256
9b54b1da124f3c8175ca6f3eff36bf0476fb2d8b4cd5650f827e8e41d1854820

SHA512
a7703788ccbb585b5c5584582ba704764c97560f283269bdbfc6a3b7c7022d18c84037530c315c4d90250f6e40f6f2ef155ec9f83e27e57c6a5da23ca150c410

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/70f7487b-1e99-493e-8da9-052f4dbf50c9/7d9f203b-d63c-48a4-970e-be4b262cafcd

Filesize
547KB

MD5
2367a2c4f94680d5aea44f06048fff3e

SHA1
41af68b7b2d4a3c1378a1eeb190e0fd8020f02d6

SHA256
aa2d31dea9ce8bd4801ab6a74f0e50707b04efd1ea49f8da58165020abde9c75

SHA512
0a2c11c6bf5a9c48f1a114ffbbede2279f3dbf11fc18b0bafabdeed6d4d9dcfc0e42140f8587edc5d17a17a57d3a805fea11251b7735f7bc569018d6c6a4d34b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
01c95303fc27b600496e5cebfc1d6579

SHA1
1d2c2efab59dbea1ce951b1b90239af8ac49ebb7

SHA256
a17cf94405ffbb9df9908f90570f5266147d86881f0e7b21e0dffc4e02fef8a9

SHA512
07aa7b452a72c0344e78b21d6a236eb2055804348c13161e773167900a8963b82f375c0fa59df59aa8c0d63dae53518135e2ed183e7f607d41dd537c4c4db7b1

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-wal

Filesize
52KB

MD5
978f907c230b1a4429aea806dd4e3736

SHA1
4e3165f8ea42a2720aaee33cae35571f86baf6a2

SHA256
4ec89c4bdfdb19b0d4778b0b252c9670395415e1edf706e56e1bb978f8775721

SHA512
22adcb2ac9852fb6e1167cbe5034965055b8894d2a89a99b9922594a119c7fa0b14a35bb7db9f1098a9755cce979b9214c221a05405cf2c03617925fc2eb102e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db

Filesize
4KB

MD5
93cc9993ad68bb4628b17be08aa7c0f9

SHA1
bf1c03367672c90ef07eec3bae9c76d32ed65c39

SHA256
f240d180a18dae8a21967f02466258faf4855f48757d4697d6e821f1bd2bb66d

SHA512
f71c69d060b97229cc81c92a4dfc2cf4ca20f2205fa33226cb755d0137b8dd7d0cab86bc440369ef980451589012e89d5434fc2d16543076422c86c2dfbd35a2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-journal

Filesize
512B

MD5
94d5a6ba9d939abeaab88dec5fabf9d6

SHA1
993ee5d7a1debc6ae86edd2d258fab1c2722bae9

SHA256
e67983a01485a9fb937ed181325f9aea12978328216431ec3e742e87e3b0b2d1

SHA512
a26ac786fe3661d082814480f899e0dc3f47f2f05b5decc84488a98ca3a5a406e4bce62194c890c9e73955e52392941b4b00e9db3f5eb2210d2bbb6041f7e247

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-wal

Filesize
969KB

MD5
7abafd4b1959b6027ace82476f118c5a

SHA1
51f727753cb3ad9631bb65ea61709a29fd4552f4

SHA256
1204651799dd2ed0b5def546060860c38ea13960b85735714c1cb79431d9fb84

SHA512
903a146dc27a589e5c39ea935b0748a35cc66fd0456b948ed8f46898b79ed2a9c5d1f391693d2879c4875a68db7208786d74fd05fe551f24bb6e76e7058016b4

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db

Filesize
4KB

MD5
91f1ca22dbdbd6cfa8f80589a510e138

SHA1
e3bcb830a8bd002cc74b333d288930fcef2c27fa

SHA256
0d319046ee46875dbcc044d89672bbb0a96255b5219c598d4ea3c116dd2f90d6

SHA512
736947a619d96c468e9ee163b5d7f39278cc5f0d04199712ed14420cff0023023f4dd2df8edd6f87a33eef4be0c5b76240f2b9a797daf45ea276821a1bd4fd25

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-journal

Filesize
512B

MD5
6252e6df7f10d08fb04df03193669af8

SHA1
36b6be446592cbfbc0187fde74b605f55b571444

SHA256
be8bc24b59911b96dca147ab6b4f7ad4f613bdc0c23ab6b1a202f4d6548fcfe1

SHA512
c4ae21f7a242a1efb44889c03efe0dc4234eb880ad5eefd20d0f0150acee9bf5175cbbd1ef7fc4266f94e1f42f9bd69c031854681c0e37f9705d37fa2b76490b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-wal

Filesize
426KB

MD5
288170d73b96680fd6203c07a852b37f

SHA1
fc84a3472b4f779455dbd4041bdd9a413221b866

SHA256
ec5384c5d76f2f2ca6702e81ec4957478fca3b4707b677985a498aa7c96db27c

SHA512
bd90b855c3d6749b03a3f0b05211122dd3320e6528c16f7c0606fe1de989e7e8299057ac0b4783f52a13a0b0a8fd67e4374e8ba4fab0b86b8ce77bb7816f365c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db

Filesize
4KB

MD5
9a7eacdbe925b6fa858f0f8282883bf4

SHA1
c227789174b4b698f5bf98b3e6e0ea03f5fca65c

SHA256
341dd9420545554b50459ddc2e8012e68797aa3d43900bf6249000b395ffd866

SHA512
8b537c98b573a74d2369b4d492426dff7eb5ad9ca1ad85f1ec798a70a80466273d4ffe89d72884253e9587536abad895783d09b97684441bb00904ab6fff21bd

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-journal

Filesize
512B

MD5
ca1444532f92e6631643760bc6ef66fb

SHA1
539eeb2fb450397d63fc502e6f835e841e3391fa

SHA256
cd5d02dcd30297c5cbf9b3aaae1b5351706d52326a27897087f465a271e5a1d6

SHA512
734fbbc8bffe056001c5629ac6926fc34bed497272d586088b64ae27cced4dd8cebd0c02a8b93c6186fe4e6055c1f7c30215ab7bc19be86b72ff898be6eb85d0

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-wal

Filesize
36KB

MD5
478d7bbaf83bebe8a750aae967145614

SHA1
913a290fae777520df13559bfb4590f89cf8bf8e

SHA256
870ffec574ad6fe11c96ac6933172cda695ae5d6a6247033371ca884ab178cf6

SHA512
b0a57b4b7c91750f93089c9fa43a751dbb77bde9b74843bd9af2750bd792faa784bfa0e425107c2e6844419266b20a4c51dbfeb758a04855f64500417de1c3c2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db

Filesize
4KB

MD5
d17168c3cc3846a0d699a5995429599f

SHA1
31c325e47954ccff1c8e59e3b380033976ea0609

SHA256
7ebe6bbdfd23bcb214093c2a4fbb70243e7703bb8fde24cae4a770619717ccbc

SHA512
5b575d041a6a480de8c4c5ac45cfc48467feb7d2a7e45f5a9fc2e65843bf97e7ab4f0619b14f5b3237accae8543bf56c7da5e6042dfd87c236803b31dec7e0e6

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-journal

Filesize
512B

MD5
4041f48ce82dd5e4370d8d422e6f9698

SHA1
dfdc44accc7d2b25b48237c74a8de8f9b5276724

SHA256
4feedb2da230d5750c766185a72d30d8b86fd574a1e1baeb4f47770a7315cc9a

SHA512
214e70b2834fbf6e8fd5d7167e67f19553c8077ac37a0539e9d906254f1f557fa6b33d46da70fe42dd62c9923a52032159c6c6b586967b83c04a298aeb5343ad

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-wal

Filesize
2.3MB

MD5
bcfba0918e48d1ffc691a5613fe5482b

SHA1
392256757c705e40f79fdee5c9b8bac6268a1df1

SHA256
07d5b72ee8c9547d19ac08380ca271401e7d98cc0f0ea3ce4b08e05c047ffe26

SHA512
9b6736ceaa75786de7f9ae1b14accfd4d079bbe24243865a9fdc67141ac7b90b4ef27ffacce8a41dcd869374136e1eba9a89f333f04655ce7a23b7fecc025b2e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db

Filesize
4KB

MD5
9fb824dc55f2d872dc6763bb3b55c4ad

SHA1
0ca6f86c0fa5fddad133e8c34d6350f44d1cb16d

SHA256
32760e196ef634f69c95e77937e8100dac3eb8de47894cfcc9348432b7c86567

SHA512
711f0f64870aa31404db1d7eaa63d546545b3e14fa6855fb1c91c30f25ea9fef2930d5b90b79560415247e4fa37e300630266e24ccfaa1b5dbc7e7b30e007e61

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-journal

Filesize
512B

MD5
5ed141818cef827e3cc847886be5d237

SHA1
addaaf5c5c94fd8f524db6133d0ed5aa2ca20815

SHA256
3fd65d787b42c03fab9730959f5a913a4b54bb237d7d0122a3f5482c4468537e

SHA512
e2cacf336688d938bd2f9e0867b7d40cb898e112ffabb56f0f12bf6ad472f661205e01fc07b893964d483e8712877817ad9104a2649e0f4063163e988ef5b856

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-wal

Filesize
32KB

MD5
cb039516fd1269be5f77e3b5c74dbe09

SHA1
400a9679c3f3f6025987715336c20feec13db45e

SHA256
c1e7929aa19a27e70b142904144e2261158b6ebec6135ce8bf4dcb7e77e31fba

SHA512
57ae18c1429e066983948a79561ff0fd13bade28849fe903d1cf87157aedf62a992aca2be3e7514276fe951730f3e7a71418e1a5bf7475c5741e52beac7cb08d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db

Filesize
4KB

MD5
31b0bbdb28f0428866422d6b796e7bcb

SHA1
7ed945970475849a5710eafdb4ba8d155006cc80

SHA256
e1c6bdfbd89eadd574da15b8a9be4814fbd2a5241d249354bf5e59fd15ec075b

SHA512
dc4e37c0f2d8a31a753214b88ebe57ca8ee3b2213c13be78136e0164f46514111ebb099a2155f923dc1991faf8dddc3f7da1e3533fa3fa41988a24f18bc5dbe2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-journal

Filesize
512B

MD5
9b065f2613ec6549dc2b35b2525ed47e

SHA1
bdf99c11ab984958a89beaaa8f665ba8b9e44727

SHA256
5f7ac24ccb0cf49168e2a3c4b9394e1b037790d530fb8de7d89aff47e969e8db

SHA512
915fe32633fc91d44f313b5fb605ec0d8c5b15b603398df62224bcfc156db17b61d0a551cd5fe63c6a5d29908a2a50724de6a86b5c926bdcf4b5acfd37bf2c76

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-wal

Filesize
1.0MB

MD5
89032bc6fb6fa091d165e41a7677d5da

SHA1
38b337e053b860deeb2263b5f8077f820edcdb48

SHA256
7325a15a9f911300ec6bd92bbaeb1e27502dbc568493d4fcda1ab86ceb21e148

SHA512
5425c6380a95ca6b1f520e088c8c0698fa4f29fe0a7c904b6ea0b9cc768d50486b9ab6013be5ffb5970899641b73aeb03796650bd37b318b2dbc781a77bc899b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/files/PersistedInstallation106195890176985973tmp

Filesize
561B

MD5
3850570d59ad79c9d0361e26a82c0bc4

SHA1
c2710168537b4b5c1f8e269e816ac7863674c65f

SHA256
e101bd901d32fc5518d4587b0164951ac24872ccacca2856d9224124708ad7f7

SHA512
c26844a46b8819ea0dcd61e5c7c632e3b761d92a992f0f8c1d27808ff15df5e19ed19cd33b31e0f5509e53e6ecebc014d2097ec74101e4d2b36c6cbe30419132

Download Submit
/data/data/org.thoughtcrime.securesmsplus/files/PersistedInstallation8731730400815696949tmp

Filesize
90B

MD5
7b712d5a4405c83a203c04cd7bf7c5ea

SHA1
f8521ce9630a7265f1fb4d5bf936abf260b8e077

SHA256
168fc18ea5e2b41f8615b2ae2022e6d1e01af530fa77d7a374110bb45e13de3f

SHA512
0f6e46bf95312068e8167c53c909c44926023b43c8c144268fd237af11c4b3a1d23bcbfde8a7a1b36ab10a521ce9e3cb4c51fb9122ccd6bcda6ba9c1cdaf8d28

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads