badbazaar | 58ccc0f239241cbcd023a5eb0800786a20df9303854e6365ac66b99038c76d72

Resubmissions

20-05-2024 06:03

240520-gr8yhaeg33 10

20-12-2023 10:33

231220-mljpbaadfp 10

Analysis

max time kernel
67s
max time network
325s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
20-05-2024 06:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

securesmsplus.apk
Size

77.4MB
MD5

30bfd388592873d836f5907c236f18a2
SHA1

606e33614cfa4969f0bf8b0828710c9a23bda22b
SHA256

58ccc0f239241cbcd023a5eb0800786a20df9303854e6365ac66b99038c76d72
SHA512

95ffebc8a14ab7d1030aae6e1eba77423a08fb5f1f64a66af402841358514e462a7e23642e9efd1973a24d9fcd6a313a99f69eb8d1e24436cc3da403964400a0
SSDEEP

1572864:jof7Q89n08GFOS1CqTKliPbRZY3IxKlgLOe2NGv3Qvqm4t4nHq4i:jC5dpKO5qtRZY3Iu22m3QF4t0qL

Score

10^/10

badbazaar discovery evasion execution impact infostealer persistence spyware trojan

Malware Config

Signatures

BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
spyware infostealer trojan badbazaar

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4592	org.thoughtcrime.securesmsplus
/system_ext/framework/androidx.window.sidecar.jar	4592	org.thoughtcrime.securesmsplus

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	org.thoughtcrime.securesmsplus

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.thoughtcrime.securesmsplus

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.thoughtcrime.securesmsplus

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	org.thoughtcrime.securesmsplus

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	org.thoughtcrime.securesmsplus

org.thoughtcrime.securesmsplus
1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Acquires the wake lock
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4592

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.thoughtcrime.securesmsplus/app_emoji/.version

Filesize
110B

MD5
e31bade5a019a0e6b67dff2bcd0dca7e

SHA1
e23c16fe5cbae417f8bf5126c56a6464d392189e

SHA256
9923adb6b6eafd4593cd927b14da17db6f16a0df811a1a8dc5d29afa4ed3971a

SHA512
818c0c8c1030e17ccfc346cf3ceb4672aa59d4ae08f44b10d6baf9080518a56cb24ef157e551978b16e2ee53ab94546f38179ea4eb04d4689c6a90c47bdb1671

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/.names

Filesize
169B

MD5
0c0bece010e9c9ff17829a2e77f9f859

SHA1
9c2affc34742ab0bf5208e3199e0e9431f81549f

SHA256
65d66b197950bed54de123ce7bc98eef09de506f5fd821641d30998f8812ecb5

SHA512
989371125699ec0a8eb81a4cd921f2f65ca185aa91e8fa39e756e5efb441729101a727cf68924591f6e3b059370c59c18d1f3d3fa48d520013131c4ca73820d9

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/.names

Filesize
235B

MD5
bccf68854f7cc3ad58404e8f78da13c2

SHA1
23a5e30e401625796aa52c506c4dbc8f0254e546

SHA256
a2d5e664a2ac2a6ed1c552cba9228b0f08e56e9cb02bc99efb47f6ae5ea3f5d6

SHA512
e5f1e37a57fbbe9c3cb6bfef0f33ec083f2aab11dd536d7a1806d957c0cbdaaa71ce13a820a13cddef73ef0bc795be32a5f265f1862f2f005ca0e8f7d759d7e5

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/.names

Filesize
301B

MD5
120ddd7906d20366748a5c7cb2c7c89d

SHA1
5f7a93a9c8ea42091bdbc4c2df6fb50441d0e176

SHA256
3023d136a3e9c7a8c18999031163d9055c040dd04cdbf8c198963aaf6e9534dd

SHA512
1cbcc50f273f87f869deb39b6c2bb11a1582ed8b069a46400b4d25bb319cdd464d9f1a14c927b41cdc45daf7fb020a972539478f1b487b268742275db41ccd48

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/.names

Filesize
367B

MD5
5938787272cf5e78d90ed3bd48cc0ecf

SHA1
a67e3a25e0fc1bca0a56c0e61f3c9ec04999d293

SHA256
53498f36feae874228444474f98935b54125bf215810438f26336d22ac6216d3

SHA512
2677d694154dc1eef55f21f48be9440fc9cbd0b96d4a640266c1d0ff43352e75f99bc0bf70475bc5b171fe317ead102b53affa472533e4e946b2c616508ac6ee

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/.names

Filesize
433B

MD5
8746ca12fe5134b9494d7fc39b56078b

SHA1
28dcfbba53867075cfacd35b3539007e46815e47

SHA256
fb3e6f8cd5a1860a83c83073f629abab510c112b3e1096ff6d783f77a0199cdc

SHA512
26e157789ba56fa43860d93b72876ef333a5ec50cca4f4e999209837af4dbb5ba4479b8362fab1fd12d77fb45ac98ad0e9c40884dadf97f92784383affe1268d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/.names

Filesize
1KB

MD5
ac86a515bb0f130081fa42aa56f8630d

SHA1
bffef48843c56be99b2875adb2d24add10ee2817

SHA256
b0cf4f31c9dd1bf56f6e194e5b57d887e2a8233395cf436bb098eaa9da39f6bc

SHA512
cd39fb76c182707738484fc5bc436b62e436d18aeadab65cc85bbb5c0981f9a7a59e89cbe60c6113ef3e3d793610d4944af74c1a2da77307ff7c755d098e6483

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/1dcef0a5-4b19-43e6-a199-81bf4050eb38

Filesize
98KB

MD5
319235527b29fd2e85e2cc823a7a9933

SHA1
26eb5273dfc5cc8321551b52df4305d5ef6f039b

SHA256
6030ac561f3f683f60b2f98dab768ef554ab16442496ce1239411b7bb342b0b7

SHA512
8aec97b6b6a37a2e45f058f8e1999cb7b2900f4d97fdee131382a9e5408c27e6fa982cbde01d231421e366e8371d60c21841972041004a60010ffe6088be73bc

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/2bb7e260-892c-44c3-8cef-3849b2438ec3

Filesize
160KB

MD5
0e9fca6d96bd031dc014409af4046a84

SHA1
100c30e776d0a664a772877f55db31aaacc78e34

SHA256
a58412b775fd81702e6dc995ec4c431f6c9adf007ba22cd19d03b5ded9c51469

SHA512
6fa18734cb5f9d37e4ead511d55cae9048d0539aefd5fdc62d6d59ce58df83a3c31b40e73f90c9e22da7e19b38ebed6af9fcf3663a6d524b576751448bef082d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/2ca1217d-9d1a-446b-9eb8-bbba1bab7a60

Filesize
165KB

MD5
41d6ed8689a70ab46c205c0a20d3f271

SHA1
483aeb0fa5904ec0707961effddbca79b3cbd00b

SHA256
e188cecc0cbbea40df5b3b9f17c2af574577b11c6ea535098129fc52dd93c998

SHA512
3a98e7d3f2c27b9200c95350965a46145e094f1d56df15e3af040816e6423618c1a662de4a1ab4a423fe1b15c45609e537ef27a9a8ffd383db2319daf5455dbd

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/496ad0db-d6c2-40f8-bc6a-5a141c60ef64

Filesize
195KB

MD5
934a3848f8625a265269c986103814d4

SHA1
e6e73860448cc3ed5dbeec5f49afab0923531a16

SHA256
bfa7e722db681ac16f3db37953ad480aa51bdc0e6d8a23ddd2a5e723e6520c52

SHA512
9fd01e568181ffcb03ac9cd62a80bf70839e36d18133695a3dd90741724f59ed7455c270f5cf0d47223778f396840f380ff9a06374327b1b0f5929ad0ca37d4e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/50dfdf38-bbf8-429c-afb5-291b5a21a17e

Filesize
310KB

MD5
042f14607928f046d6fd9e9084706ab6

SHA1
8346d08adbf5dd63aa0bbb80032ed17d31878832

SHA256
c981323419ce5f00e6ce783df9eb6a896126386198d1c600f6c71d0a3c479f0b

SHA512
91fee0d4db48e1386e0ee967a9ea6c8f1a491b5523e8b291c22c2ae308a8d2722af733f7264290da14ab54e82d924abd71c5805f006e80c807e111fba88847a3

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/595c287f-331e-4fab-b7cc-ea13affb419e

Filesize
171KB

MD5
7b1dd77546f3ccca9bb7db640a876e81

SHA1
fad01c0bac8e6dc65b99cc597d5ea5c522c295d1

SHA256
bccbfb237d094e438a3fbb81ff310aae4aec31bc3a378c2cc955ff41a2ff534f

SHA512
c67f08f9a6de5aa18c1a6cf6698817cf87148fbdec30f6bf771b9811d4f24804bc8384cc58e4fbec2fd57cbd6b0b3addec3147181c0d172f2de5834b6ae00aac

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/6eaa4f49-cd49-43bb-9736-ca3b046c409d

Filesize
97KB

MD5
beddbfe0b88e8637dffa52ad90da5d0b

SHA1
e760e6c016c98064ed7bb3fdfe1d706d4bf87ed3

SHA256
fefb0dba97b82ed816faea38bd4337e5351553acda85adfb66effc4e8512f106

SHA512
0ba25b57aef0341eb6b345b493fdea838950cd52f1cacfcacc0f7318d6917ee95bbbdb974db9081a4eba00bcea8d85217a30c564dbb3279c77d79c9eb1823542

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/71765f27-5d03-48cf-b43a-c4a1634c987d

Filesize
270KB

MD5
2b6a6cc3d78ead3ddf870f681c6aca85

SHA1
2169707a259fc66c510f63b76599124399706321

SHA256
3369d616f09723504253fec8d9717c6c8fb305dc9fe8a3dc136432d42e98f53f

SHA512
67718d6ace0283a30adfbf7cff8f2df6bac13880ecfcaf72cafe52cb5700d6a65ad473c7629660e3121dad9e5981be4b06dfa4c6d4a12ffc5f06e3819b306e20

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/77725ee9-64bd-4f21-be39-42f54c632389

Filesize
319KB

MD5
5c743ccb6208866a2985192d834b018f

SHA1
6351e44e73562246169bc0ccee0255dd75207fd1

SHA256
3336ad1ec8c66df069547b7a0b5482f8dcd136549fa96c752256d373441ff700

SHA512
7e79518f2ab89dd5493f902a3b05339a054c8893e99e9e1e19394ed0aaaf7d14bd0fb1cacbedb5dc9f9d0f5a467065d7a366fa37d02eb0ca993f7b0a215953b6

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/8447a5c4-1f76-4d81-9633-e009fad1eb0a

Filesize
170KB

MD5
49af8d82c018b8939c58756331b43436

SHA1
c8dea705557fb7153309ae2686f602366df6942e

SHA256
426031c280336eb6854593ab88a148ddb2e1e86a6fb6ac7fc03526d35cf107fd

SHA512
5f394aff201f0343fd3ceeb2ce2a3f1cf3809a16f1d91e9ba284b96216e80e7792511a7ec62889ddf0c9c2e35e7e965e0c93227a33376112ed072c28ea90a691

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/8969501f-2d3a-45a7-9ef6-01e3154d3bde

Filesize
117KB

MD5
4778f40c4b886d74c4d1e0eed71522eb

SHA1
8d502537b09089c393e1c6fd799e7ce4e7906d10

SHA256
28acadcc6252ae7754e07d525e55597f4a31b46a0c7302c8e40cdd790f77f77b

SHA512
44d5cdd7075f5bf6d61847a44b678eaa7b9ae6e7d2147aef9b6262ac3837b6b289f400117f2eefe64e0368826725650b753c4672fe676ac46e92b7cc562a7c60

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/96f43848-56b6-4854-8f41-e16ef5232bb9

Filesize
186KB

MD5
bb97bf12f37c8503fd8b1bfbbe1ede76

SHA1
b9a4c1b40e60ec0b84c8818fbdfd3c155dc96e37

SHA256
e685af53e3d177dababc7da2a4f83a2ca4b25444377704e33bbb41966900ff0d

SHA512
c2e774786f68246a0d7046cc29c28f56ecca5eb9af6fd8ddfcf454ec0a28579b50b1713340492369cba39bf199d5196ac9149f75670ce3bbcd68a94356824cb2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/9757a45e-dbc5-46f7-b27a-ae30d20fbc75

Filesize
230KB

MD5
b965be8f0d3028fbc0257877b675368a

SHA1
9f220e48cfcef7d1bb98fe54223a21d972b3a2c1

SHA256
e00c83510001a8629e03d9c3703a13f7634afecd1339a373c0f97139a48b8899

SHA512
8874102f4a5eefab8e2ca9c250bc00c28aa65598b883401552980c6b8085fb576a15e006c71d48f1cf5e49f8713340694be59f3cbf8e459e5814a28f15555a77

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/9cc8af69-a2a9-4706-b731-354ed7569cf3

Filesize
395KB

MD5
ecbd05c275f2055caeb9edd30b46eef0

SHA1
8819ee6ada7851c9939129b9849552f0ecb6997f

SHA256
93e0a7404b94b43af9534dad583e073d01a5dd89b29e845efafb47fba9303bfb

SHA512
248132e9bed902eb5a28037ec0f9e367c32da970550366112ac3eb35a8e3540b331d817438b30ee2ae61bd818b2460bf8585d43a733796e52f67c348883c2ab1

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/abb62631-2302-4b35-b58a-2516cdd2d9cd

Filesize
285KB

MD5
0161f7bcf67eb8a773317c1949168d81

SHA1
e8dda6ec5f940a9c1c3909ebb255a80adb9120f5

SHA256
f66725b23105d037cc8dde4f5ff438d9bccba26f3eacc1d7a77635e2c98dbcd5

SHA512
bb46b3ce28cf0e111adcd3dc914b977a51a5c535052baa459107510324ee18135520ec303973daa16e2f02a51a680bc2c78d3c974ab255b88f3687e161f93e5a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/c169b5f7-1220-412f-9ac6-dbd462cf26c3

Filesize
295KB

MD5
13b4458d6adf180139e4d0a063ea8aa0

SHA1
624519a7ec8bffed4954ca79a991aaebb27a4b7b

SHA256
df317d0d5ce9069d14b37d653f97855d9a6935920ab67febb5bcd5eff6691c1b

SHA512
82cdd07f33867e6e36660a4a77e8c1a2cf832b339de6d898c7331de0983da18e60134da50a566cd3f2ed06771a334397929416d805c30227c56fab2e13eb5292

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/c6994acc-85c4-438f-84e8-4c2e7d60419e

Filesize
283KB

MD5
05a3aafc6e48157df8069a426097fd27

SHA1
0cf3b930471c51c69e678d11a558390ec7eb119b

SHA256
ab6b464a6eb94e11299d52db7e112a011bc8766fb274f1122db82a67ce08c823

SHA512
7079254f9b03cf38ba83017e2030947ae701dd0c0df16f7048cf99da66e3fff49222cf49e05662c3ca512265cbfed9f60d217e25591e453d183609351d1dc893

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/c81f503b-e5c5-489d-bb4a-4da1015ac3b1

Filesize
308KB

MD5
6ebc65437d1d4fe4b93958d6f2f6910a

SHA1
ef46bf9ebf14030f855987b614b2ac7232f7539f

SHA256
9dc0a156253a1440d2b9f2a5457609fb4e7ee2856230d19b467d92b23530ca53

SHA512
8606b29e86f2b5f409335dba865fc23e9cfa463c29911dd4e00d7c2bb9dc5916161a06659e58ee58271026fc0bc8a87649540fd1b8cdcadad1712f14e2334e5d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/d606284b-79bc-4a39-b4e2-85bc04d79dc0

Filesize
155KB

MD5
ede53c5a7a8bfcf7942df6a661d2230d

SHA1
5f910091234ece72e7c62a6275362d9be987257a

SHA256
85bec3f7771ad9ba66502e41d6662417f54013c9553be53c9137c0c42d8f2cbd

SHA512
bc0a135005c37b67325f7e8e2dc82df1ffdaa6251bbb03a3a6e2efa0a844e6740f5cbf4bce10f277d5679fd9ffc9999ca8e45445305e66ebbf042a5ab1b0f592

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/4517e789-d8e8-476f-bc11-eb8103b221b9/eff39432-7ef5-429b-94ee-339584b4749b

Filesize
286KB

MD5
5d19f5799b1368b4b05f09d67173a37e

SHA1
829ca5ef22436141b3c05b07260d3972d6935cd4

SHA256
e360964f63618bef6240611e7b4c96e877923f6dbc69a6265ef091116aebb54f

SHA512
e555892dc3b69b9fa39ccb7c683c56ce19b12d651237ea69212076dfa0e3b5416996001cb500166630bc54f0928e4ff05b0b0e12268b8ae835603264c9164c11

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/.version

Filesize
86B

MD5
e6e273d806b257d965be50ab5c1c4b27

SHA1
aab03994978e06f5e301284bf13a3f595fd70990

SHA256
c02c369b3e95520821fc63745f48a7e2528af0117510ac4dc16720766ec85df7

SHA512
28209b2888bdb0e2d14674cae662aab85be3e2ef9eea9d84bdc8be9a965399d7e71b7edcd68abafb959829ade362d118762b6e7db39cae51e616ad5cafa038ba

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/d46eac9d-73fc-49d3-84d8-89bf39580d68/.manifest

Filesize
498B

MD5
1dfa5100b9fa48837a0a417e809c393c

SHA1
6c5bc83292185df1d64bc91e53cc04bc65c81cac

SHA256
05462a8bb2810ff209212de048eec268b2bfda46a25437c990d4e811b70ae036

SHA512
5c656ccaf5f363e5e688330b4b676d5d0ce290f5503627caac581ed32c9a1d4a63d891c0ed35c818d6068cc170ed15a7114e52972eb198bdb7a20fe57324143b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/d46eac9d-73fc-49d3-84d8-89bf39580d68/.map

Filesize
99B

MD5
8fee1ce4c1e3fdb5570d58f76f7909de

SHA1
064fec427e3f3d78a1a947d931cacd533c12b533

SHA256
3e078aa2393e655b74b0740400a80705a3f8c4d6538de3dee4ebc026355ac01b

SHA512
0aec515ab79d93884c4d083e7b7a68881b5dca7324e5466bb8c478eb805f8277bc209ff229690c0b9b40621c6c742f9a5c672c42ca33f97629a06bd39a286fc5

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/d46eac9d-73fc-49d3-84d8-89bf39580d68/.map

Filesize
105B

MD5
d5bfddaa71e3f06649b84a9ec173d4ac

SHA1
cd72111dcdd4853c50e41b4c263986ebf7196a8e

SHA256
edd43c866a27f07f5f908445391909dc8a616edc5adb13430ed2e178bed4c671

SHA512
bd60cc24b7f4e96870f9144dd0ad2ffb62c6ec4003fe01e0ba605b1a8f98776b913829f2b03373c334961fb5056a636d773c45fc9dbb7e770f1b684e09ea3670

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/d46eac9d-73fc-49d3-84d8-89bf39580d68/.map

Filesize
169B

MD5
b54f2fd01d0a8d8b748d3d07a55132b4

SHA1
3a825362ae52563657b02c10a0a26bc15366bb1d

SHA256
76c6354230f1d35682d8ab02aa5e9d1c9ad8038d64fe5d9aaa058da32a6473f4

SHA512
768203fddefb8bd745b80601a1da2f6b473965a532865c60cca6e463ea1d0a441e61f1f5c8830f06b5277a768bedc40e69c860559901ec30d1d6fdfeb0b507e2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/d46eac9d-73fc-49d3-84d8-89bf39580d68/.map

Filesize
237B

MD5
6e029688ce1d08261bab7a602b654b87

SHA1
78afa714012f5abce6edcb80364b895fdb986590

SHA256
5f1d7a12df74053ebb6c255aee5ed49c20c572cda00752704a1edbc19ac9d62c

SHA512
d8a587c98f08da7faa30a371349b893d8db690dbaf2b3e33a70762902c9f01cd214e08bf194389c28f6333cd7f3f4f7acc727feb724866d9b87b1551df50934d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/d46eac9d-73fc-49d3-84d8-89bf39580d68/5ab136d0-3bbf-4801-9a96-bc03cb5a89ad

Filesize
56KB

MD5
ad4cd34327721459c11a67b4332c945e

SHA1
9c0742c0bb82288d984a37dd2642f1246e599d17

SHA256
305f941c2fab1d6ee97c5a4460f8653ff4ffec429701e2c9648befa1f593a345

SHA512
0e77745e3cf711c958e443b6b2b1a417dc88023ec1c668a0f7e1f7944c54abe78015a8a94197353ca486ade639352f3fc4e1edc215191b7e7f6fd9ca2f9fcf24

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/d46eac9d-73fc-49d3-84d8-89bf39580d68/609fb282-a5e4-4b1b-adee-401ce5d97d5d

Filesize
307KB

MD5
1aa99aa25c72307cb7f16fae35e8c9d1

SHA1
17ec5016a5f2b2ea4f27f7bce1df4192d3590161

SHA256
a0b1f949528f7a3a2d2ff3b6df67c6c1b5cb8f62a2eba6eb5e06adff2d5795f3

SHA512
1a8f5535e76188c25bb2a4c046184dfbbf074c56a554083e12268c32bb11715ca6f70bb0007a1b5915a80759c4e11060f3f599d53a45c2e7d6b787da4244a578

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/d46eac9d-73fc-49d3-84d8-89bf39580d68/cdf54537-9ad9-42dc-a02c-9d74c085f9ff

Filesize
308KB

MD5
c6dacb6bcfcd747bba440bf2fbd2c85a

SHA1
ff2d9fdf17ab9adfd7cd41a75ef0495f11d27b56

SHA256
3c163d15b129e997225435c2ec3544afd57a1082ebb12f87a48600f9a1c74869

SHA512
6e7cb6de0e690bd8792d12959d1589020b1ae862d21ed927aa7f683898b9cecd2c8b813035b2bf3d99654cb70df391b16164d43f29e049e5666c6c931cda7d56

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/d46eac9d-73fc-49d3-84d8-89bf39580d68/e23c39c7-eef3-451c-966c-312ed53a263c

Filesize
95KB

MD5
44850ec0ba405c1c5620ff156b3d624e

SHA1
dda0533f8a46369c980550d9a9c4264d0c90b60a

SHA256
9b54b1da124f3c8175ca6f3eff36bf0476fb2d8b4cd5650f827e8e41d1854820

SHA512
a7703788ccbb585b5c5584582ba704764c97560f283269bdbfc6a3b7c7022d18c84037530c315c4d90250f6e40f6f2ef155ec9f83e27e57c6a5da23ca150c410

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/d46eac9d-73fc-49d3-84d8-89bf39580d68/fa80d0fa-e26f-4bc2-9305-7282050b9aa9

Filesize
547KB

MD5
2367a2c4f94680d5aea44f06048fff3e

SHA1
41af68b7b2d4a3c1378a1eeb190e0fd8020f02d6

SHA256
aa2d31dea9ce8bd4801ab6a74f0e50707b04efd1ea49f8da58165020abde9c75

SHA512
0a2c11c6bf5a9c48f1a114ffbbede2279f3dbf11fc18b0bafabdeed6d4d9dcfc0e42140f8587edc5d17a17a57d3a805fea11251b7735f7bc569018d6c6a4d34b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
b67defc2ae7e0674e7461a41759f7a0d

SHA1
9798b95327a2fc8e6724e2d614e7e0a879c4aeb6

SHA256
d523675a04729e6f3460e7cdd8bd5cdec635fcb5c96376a4bd0b82e36bfeaa2d

SHA512
541c1329624126c3cdf1ca3f2d9c20a73158b9f601b53661c507c68c7a9790f625b969ff35b47b3c9bbb8fb4dacd78f39c393e0ef6d102ef1ec374f6541b8da8

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
136140c519a9ff9e68c16547ccda6817

SHA1
fd04c3e52a2dd41d8f2de58e4a3ae0aa2a4d4c80

SHA256
2430a6381c6967183fd00cbb0e51d2ba1069b4480eb799af7e6d2e50300a3cee

SHA512
e98a7ce7e9b02aed05fba6f1f3ed03440263eb7a3fd59810d2f587e792813bffec77ee332d2f4d83e3e9f62be73a5fe83de35792962a92eee80441eb58ee9b9f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
7626a1b34949b7dddd864cd398d7d06e

SHA1
22462e1e29dfe1e7dafd4c99b57cfeab2816f19a

SHA256
48bad6117fa79da09ff2f5b7b3aa52d70bc648e612592d399f4a15de951c7c7b

SHA512
5d2b0d87602a7d2374b541e7ea47dde136c8025b9e0701016f1fedb1b9fb4e43d22879c2f08000bdc53763a89b889623fa4803999338e4a527e958ac88f72c79

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
1c30e59fe8d58f3a1ccab59c1f6919e9

SHA1
8662e74034bfa6bbd7a53472f18ae3d673ac2be6

SHA256
1f48ed89d4e43b5e4e6548051e6456c494d9041aa9ca117edf497c2ec9d8bc53

SHA512
b8f5be716ee94d5b3f1fe10f1db0215000c46b18348637fbe9cfd99276c3d74b366c48b2b23d494c0be55aa12b62c44d904fbc8cb48be4d14eced6146caf292a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db

Filesize
4KB

MD5
cc486cb20d3df738ee249520388d6ee9

SHA1
e3ade370b9a33692d0c42a309067ee65222ea5c1

SHA256
d22b83e3e9ef6c6baffbd4217abc00b78a4153baed0b3b994b35da5b00998d57

SHA512
2aa5f263eecac6a6cb12aafc1a1386870f6c908db8fdb2d1ebf646259d85b5d7eb61bcd560d88864c8f74e75ecff73e6612aed6620930dab8617781bbce82c69

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-journal

Filesize
512B

MD5
bb029b033a55fb1e254ae20ca5b06b79

SHA1
01e8b0c13b48899b9e64cbdd23ea2905e53702e3

SHA256
fc27f370f5b49297f727018f1b81e9cd5470cffc1606ddfacab7e7a278c506ab

SHA512
48221c116b0cfe630a281f7007a635f3b85fbab59a4a18036a2d21f247d5e96a950e070e3b96e7de9f7cd16777f64fc7bbfe5b75f162839f5aed4a63480dc001

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-wal

Filesize
993KB

MD5
741ca3c7d4a99ddaff00e374e8abd4e5

SHA1
e333bba41f2b9286d7d03d2a02c06547a84756d1

SHA256
967109ac7bd11effb7191edf6866efeebaa440e56226753c0814582e39dcecd6

SHA512
cb65af85bd2e8563921cbe2ad45719f2bc1899ef7279da7995ce14ec81e3d4ea665391dffde487dd0d1ce5cd6f94a5f4fc48d7029f1f742c19c0ae18b81125fe

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db

Filesize
4KB

MD5
3c6423833b234ac4048427ba663b1e39

SHA1
26eeaa31ce27193124f88aedaabf78ee8cc7aae2

SHA256
1fbe6f1bbeefe263876c087131bb8aa58c239aa45389914e5d09b0f87b49f405

SHA512
7ad2023589ef7e7e6e9ec50d3dbcbd72c6e24ac6fdb815b4052b381c5e31a96d144648c6cf9a971a7a683a306a44e9f0b47e05cd9eeb76543bcaaf73520b05b9

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-journal

Filesize
512B

MD5
ce5f77caf00e9c4787c9986871f2bf67

SHA1
6e257c0b9d3fdf70265eec01e2566b8640f96d45

SHA256
2dc00a41c261336e6da051fe52bdebfea64ea23b895fddada0a949b5855834c9

SHA512
63a0fc23d03ee3857f4d56f2fab361917d21ee0e3c316f2a557f83de7d2d6f7b1e3e4f450e86db1f0779379533fe11d2ce46605bc50ebb0720760e5edcb37139

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-wal

Filesize
414KB

MD5
fc5cd8a2110dedb285ffc257178b2a92

SHA1
311ed37231ad1a6772a112a509ba148969531a09

SHA256
26de57df8043e3259cd4373d06170c79e1e6a39e82932035b8b03618cf8f1be4

SHA512
897b9f004fb4bb04a23f35e624bfd893493963a285e021e13737453422129c5bc75f188589cbfc90413142c047575fc21a82ad2c53d40fa8c6876d5f1c35ba4b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db

Filesize
4KB

MD5
1cf25958ab9dcf4bea1cacb9f4c9537b

SHA1
cd2288cdd3744b5d9c4f6dd36778a32a283d99af

SHA256
4f957d8791b71e3a2bda5555324459484343deb0cc1644149c291d029643f0c2

SHA512
1fdd2ebafc264dc29ad05cd20db36378348d879c5b7c7459c5cbcd841388ed5b6ebad494b33bdabd300443e356d61844e218d5039485306a66ef2d912da6708b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-journal

Filesize
512B

MD5
2b2c73fe1a8053a86f30a6b2cbd081e3

SHA1
982f03d666046e511ff3e708951d66f90126bdcd

SHA256
12b0f0a19be44fb22ce06f4ceafa82fe81905b80ff5eb6e963f6269a453eb192

SHA512
d86799efdbae639be512468f7852d537e54c299208a7ac55e5457cdadb06c25a7f885e9efb998bc4e8f0436e83c24c1b174087100a7ce9265fba3a02cc9da0f3

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-wal

Filesize
36KB

MD5
7059f79a2f88c6a4aff6276b15b74fd4

SHA1
c3d879e140aceb4b41858fad7832652be3324b67

SHA256
6dfe631d31be408d6b1cf29607890314f3aebba7982720eb4601b3ec27dd6a5c

SHA512
4fba938a61ccb09e8acba523c50739c2cedeac979c44bc0987c1934f3176dbe199d66c098a4e67ffd220fefdb88a86618098dcf26283088e9ffda097dcc1ffcd

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db

Filesize
4KB

MD5
668d87baa39afa9661453d238326fb74

SHA1
a61aa6c5f3942a18a38ac89b35fe351109ce27a3

SHA256
89826d974b607eb0e18e8e0bbb976a67bd8dfca60ae6e78b55206fababe30da6

SHA512
4265252d3ce58bd3425d7657b326082894246333c9ec1156f32eeec4f4cf4212dc505fc40a883fb786ed671d15fcf8ecfc347915059e62946686e47358eebc6d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-journal

Filesize
512B

MD5
7b95a8e9a2424b95e573a71323859f6c

SHA1
a807d973b25e21f04cac2390d69d0f38e8c2030a

SHA256
39a34cdaf8ffd111eafee4f8d9025fd19028ba7668b7123e6b8d13e55a32e1dd

SHA512
d9d9f13792d21bc796f03406435f844f9aafe7b98c614f57319a1ceabbdbf062f52cd4bd2e4263cd880a17d7bf6877c399bf23e53d5323e6860d0abec6b1e237

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-wal

Filesize
1.6MB

MD5
7ff7715f0fb6468d62783c69daa1e37a

SHA1
29988cf08e299f73cb7eb9557c340de0c04be519

SHA256
daf36e5188c8b3118b38ea9543eca0f73c2b47bb774529ba2411facf52df3930

SHA512
57eddad3272c681fdee1e016cb25a34e3714975d136dec3eccd68282d820dc5fa9beaeb0e2090c782b75a967613f7e723adab0ebd7b8a25262e19158f8576a75

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db

Filesize
4KB

MD5
ed09239c0b88e9eafd9622991eb0c5d8

SHA1
71f288e4871cd8d9fdbae4c344ae140b366c26a3

SHA256
6a72c107c92b33757232b67169ae24040c95311410af99a690754cf36e1db0ff

SHA512
98d87db467710950e9c0cbb6257e8ef8ac84848e298936e4b18130d3ee6b71db029dea805a813365f7c34bb0517be449673df3b156f0c31d557b7fdc62ecdd22

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-journal

Filesize
512B

MD5
c1e7d8664a9984da3bd00be600cac005

SHA1
ce4e199b05ca27b8c92f1609f0c9402bde277811

SHA256
7fab14e4db3d03d8d5d2cacff932cce8dee84b042d4792596167017630816bda

SHA512
809eb13bba2bf8b37c921a4b10245777d4a68e5329f9673550604abd9f48ca1cfffe7026641c0ddab5fb22b387d62af35b6d5872bcb63e31dd5002921b053d49

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-wal

Filesize
32KB

MD5
439264e4922cb867ea5d531c979542d2

SHA1
90877baf2816eb946d12a881e64166c7019a9dc7

SHA256
7b722bcaf3498eacb37fd1d549966b7673436fe044879c8083c906cfa2970061

SHA512
6c1349d14aace865abe47f920b9e3964829113a3479f1db4da29fa71724755152d50867b90974159d7a87b863a130dc4f4aa2642e0557214f7adc016bf4e233e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db

Filesize
4KB

MD5
a753fe3ef5dad8650c26711a622ee060

SHA1
a607a1c67cc8241ff923e98274e6258943f5e52c

SHA256
bda0af5950086692922ccb11c0408bfa324211cdb6bbc3c972f003d2621dcedc

SHA512
fa1fd865e4139bcf84861cb5bf41669571cf29dc651265358fc9a67e82d555eb39e0247f374d2209366a5853661ef88ac6a24ef5a3cf52014f921a75686b1fc2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-journal

Filesize
512B

MD5
7c07d1084cd0af0529f3f64ee99020c9

SHA1
029fab00b9362908e28c5c215cc6fb50b0a48ccb

SHA256
84575638be6583a08178eb8f5dfc54aecef04efb17c624d297502148eaab5e05

SHA512
3096844950fd12cc74022774918de8583f5f7f1e2159831cc7aaa92c7e8a4169ba47f0e0e89dff96ce6e391c28296dbcfd0aaadcef713a28f0a4bdaf4ec9923d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-wal

Filesize
861KB

MD5
31f3b5ac13ae7a00ef80b936ee8dee3e

SHA1
94f7c6d47c78a608ff29d6d9295132d75047f39a

SHA256
da19b0ecf5fe2133fc534eaebb68a98af73ae3c3e443cd3c8a7133c169f428d5

SHA512
bbab8442563af9042b0b82e11bcb000c7f6b223501eae3cec1a80036389faa59cda366e997617b246bf15d0526c891886a1b8a2f1929cf82224dc36eac0b6703

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads