badbazaar | 58ccc0f239241cbcd023a5eb0800786a20df9303854e6365ac66b99038c76d72

Resubmissions

20/05/2024, 06:03

240520-gr8yhaeg33 10

20/12/2023, 10:33

231220-mljpbaadfp 10

Analysis

max time kernel
89s
max time network
348s
platform
android_x64
resource
android-33-x64-arm64-20240514-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system
submitted
20/05/2024, 06:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

securesmsplus.apk
Size

77.4MB
MD5

30bfd388592873d836f5907c236f18a2
SHA1

606e33614cfa4969f0bf8b0828710c9a23bda22b
SHA256

58ccc0f239241cbcd023a5eb0800786a20df9303854e6365ac66b99038c76d72
SHA512

95ffebc8a14ab7d1030aae6e1eba77423a08fb5f1f64a66af402841358514e462a7e23642e9efd1973a24d9fcd6a313a99f69eb8d1e24436cc3da403964400a0
SSDEEP

1572864:jof7Q89n08GFOS1CqTKliPbRZY3IxKlgLOe2NGv3Qvqm4t4nHq4i:jC5dpKO5qtRZY3Iu22m3QF4t0qL

Score

10^/10

badbazaar discovery evasion execution impact infostealer persistence spyware trojan

Malware Config

Signatures

BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
spyware infostealer trojan badbazaar

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4412	org.thoughtcrime.securesmsplus
/system_ext/framework/androidx.window.extensions.jar	4412	org.thoughtcrime.securesmsplus
/system_ext/framework/androidx.window.sidecar.jar	4412	org.thoughtcrime.securesmsplus
/system_ext/framework/androidx.window.sidecar.jar	4412	org.thoughtcrime.securesmsplus

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	org.thoughtcrime.securesmsplus

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.thoughtcrime.securesmsplus

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.thoughtcrime.securesmsplus

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	org.thoughtcrime.securesmsplus

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	org.thoughtcrime.securesmsplus

org.thoughtcrime.securesmsplus
1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Acquires the wake lock
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4412

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.thoughtcrime.securesmsplus/app_emoji/.version

Filesize
110B

MD5
8b7ad2954d22aad6b2c02d70b9236bb6

SHA1
dec5295f1de9ee02321654ecf926621ec10c6cf7

SHA256
eb3894511d63d8997ba1336c61bdc65f7964227736bf87dfd78505fe526604d9

SHA512
56c6c2023fdf9c3b4f87a89bb52f34791f0b5f18965b16771a08f89784323f04f4343667d735663221673fd2122703a24d39a02a98e4fbe930ecc036e729cfb4

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/.names

Filesize
169B

MD5
537a56a0b6f46f123f416502f7659823

SHA1
9ba432bf73a32597c4840c903d9d09fddc62ca92

SHA256
383fec7433d04c096c8bc30a45e6c70dc806158639d91563cf3b2cf091269a0e

SHA512
3366e2d12cb49e04a7e7c9dd5e7e222555f584988e203001594c8765e2fdb4c2a9f3067dbb2a5c3f5c9fca9636efd5c7ab04a1b8c39f909ad9b6557ccbcfd55b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/.names

Filesize
235B

MD5
186db3fff79de8d7c6679bf0b3ed2a29

SHA1
65c472e893cf7bfe01a1be8ce9afb2b951645e52

SHA256
bcd2bbb6f9201465f73ac1959a6fb09bf2b3fc0303d5a7f86b8992d2d4a43226

SHA512
ad0aac4b23c9ba0d5bc6a5ea31c5b381117b11497075963dbe9fad1f35578ffa75e35ba663fc0f518cc81b404be03d3af47b71a823fc71ea8a810b2113f27351

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/.names

Filesize
301B

MD5
32887589678e066138cc5a4b5f8588d2

SHA1
7e035189cf4c2704d3d4e66f8ab0e089a061aff4

SHA256
9068b27c4573cd9bf19f75945994ceb8dfff870e9ea2599d8929f7789dc829ef

SHA512
bdcd59202593bf4c0e86b3a1737f7dce72fb143cdfd2539c871734cf223c50d11f7c7e5969590650562eee312ea68e2f32e6de6a33d372dbd350a2c4d5c56652

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/.names

Filesize
367B

MD5
ecc4e52d315b213aa145e32c2e1702ff

SHA1
267ac7bb438a86932b2b3bb456db9f0fb1bafd18

SHA256
2c5f775d659534913aaedbb9c75bcc11c0c79e2f424a4109a65649671877fc2e

SHA512
db870ff069cfa69c6cd58206fa7e2e1542ac9c8f89f88a103f3dfd2e19c560778ec464c24104b45a7197cbf984cc9128f36d2dd6a680c4452771510db23dc3d0

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/.names

Filesize
433B

MD5
3ec4bc3684a8d9aeb5be2bfa34e9c982

SHA1
3fe5283399a994df0f093118d13b5fbb831caafd

SHA256
1a3d3560171edd9814448670a6ba90593f2d73308426772154beec08af7b063b

SHA512
1a1657f2442d68b0d2e95c22fee23fbb9e6fc08ca089e6ffdc85a252af38b9f5312870ba310f2858c02842c1b00a4501e73b04a197dfdbae34f6881ddfffd126

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/.names

Filesize
1KB

MD5
70fc922e1376dd617faa665a3d8d2c32

SHA1
f19e47d4fc43c374eeda8d8c474163c591b9ab4c

SHA256
10cecbef844c37da0e49cd7297c20b599b489d00c71280eae5b6f03b8b31c694

SHA512
a2ff121871342f75537428cc7532f492fcbdeca3d679b8a69b48e73cb45c51c70f6c2ead751398fdffec965f99ea910c05bf896fd2569f6dd7237e6246485ea2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/11c18c17-ae61-4ffe-bcfc-22feaa342dfd

Filesize
285KB

MD5
c6a67a9ddfdf251f05dd886452686087

SHA1
32fe0992e9f52783505b7381b1740893d9b5cbdf

SHA256
0a1153cd11c948440e201da202c5a4f19066ae1ff0f939ad3031b8e362f79019

SHA512
103a1dd3bed172205153bfcb97dbf1794f1eb10677ffa3086d6e54d8b39bb3a78f315caf91188d4c4ddd3d19d8be847936122898aecfa2a8e0c10d0c2621434d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/143b276b-01af-447e-9438-80417a63e864

Filesize
97KB

MD5
c2caca587848166869a24441defc1c08

SHA1
ee2798f663d81748144bd637c25331d7c1a5128f

SHA256
ee6ca3555cfd0c97565387349c7c7d338d56057d77f3669351178f0eeebb43c2

SHA512
e6f92ad1cec64644de123a76eef6018db4355df71cb10af91c8fd9f897ced12d98c9cb7836f929cd167994423b4342ea2b88a965fce546f5b6955c53d52fda78

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/18bdfc55-7823-4193-9733-4883a1c5f635

Filesize
310KB

MD5
14628f663881dddb2808b1be2da5d214

SHA1
d9605e7c47c04923712508ee177688a4bbcbf52b

SHA256
2ec1f57bab57e6fa3d8e3d26631400dfe01eabe37cd5f8c47a123e785cf64502

SHA512
3cbe1b181b46fb7824660d14cb529015bb612ce5e764ac8a16305a243466b4bf706bad688cb2df19f312f6a79340cf5caaaed524cebdd76715af0f7615951ad6

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/1ec5647b-7a16-4c8a-bcdc-3ac01cd53e9f

Filesize
160KB

MD5
7707fa4336cfebc323c97716d8aac69c

SHA1
9c469511e79f9e487deab3e6928ba273a40a5a07

SHA256
429989b71ca9c52ab62f41fd1b4a7bb8adebc118389da3b5998c6a165dd66b2d

SHA512
3a837894ed9cdd2bee0b66f674d6273b24f3375eec2791c421fc3e423789edd5a4d35b626d6ed7e1f0ada0defd4cf01536d7adc9a41c71bc17b5b96de9956089

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/2c200b25-44da-4796-8e31-aac22a333893

Filesize
155KB

MD5
8edbe0e59e3da26d530d9dbda07eef12

SHA1
ddcc7596c19ca3fc2b7d8fc332f3a0b957065366

SHA256
e053c994bf13292e5cc8c77fcdabdca00ba51c3babd430ab59f11c800dcd1ef2

SHA512
f84d91dc4d5acdf22bca78a836b6c35997d868e7bfe42b2cca2e778dff4b6522e0133d3fb19c8eb93fdb059724f3cc6fcde7083a37b47a259cb2b0a7477694ab

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/370e0b3b-36a0-4d18-b1ec-dded0cbc9108

Filesize
286KB

MD5
aec24bb02b50d827089174825ec7268a

SHA1
ad919d93b834540bd85105295f0e02811704d679

SHA256
f5062e9c6e066a47b3c654548a4e497c74548bbbc7c0327326c9693b8156f15d

SHA512
08a80f59bb465f49a95572056e78a954a71bea41482de1b23dee8b5067ebeef22c258cfc6ce42bfb53c78bbf2cdb90c6107eeeee80391ba768cc0b463f024365

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/481f534f-5da2-4ad6-87eb-760553990450

Filesize
117KB

MD5
7ae6bcfaf8bbe26ab4329890df79c318

SHA1
338b33623308353541946da974bee4b7f53036a6

SHA256
27de844917e710f336fb9f922adc1531ef977dacb0c4e9bd31ab89ab8672e063

SHA512
9ccebad1cf7aca889a7b9ff18eff26ba242328aa6c3bf3ed4bea846b01d6917e56fd0d3b8b436f1b787620cc2362b67e60da30db5aa5c6723a0c507a2b1419ec

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/5849ef04-8219-4a6d-a1be-e3903bdc0251

Filesize
308KB

MD5
93308da4ec28e9db8693ee02143ec845

SHA1
9a244b46c8073199e3e11626d937824d9c97cd6b

SHA256
0141ac9f86b5905f46be68d184674b583d650dee80faad03ed7c8edc558cb153

SHA512
0a479ce3a21852cc55d2188abd40cbc58d7bb4c020aac9b01f2f16cfed880e6cec5e53e85a3d6ddf754c1c245b5dc7f116e2d373ce12111d9d2542db27a13f01

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/5cddc8cc-241a-4ede-a816-5a411b096bd0

Filesize
186KB

MD5
978ae44d1171e15ba4f7f168f8a098ba

SHA1
7240ceca3581d7591e0056e2334f3b178d3d6efa

SHA256
7505bf7dcd79faba3cd33c8b439a716eff9ab0de0b71963b3b049aa11865b80e

SHA512
6b3bf3e12c2c81348279dccceb0c574450047ce8b62f043c2c7f686e8bb05b6f88b84cb470ef3f670bb801875a72fa50d813d46c6ca17143db6ca942e1a13a15

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/5fe85b89-f045-4544-8c45-f6bbe52ef88d

Filesize
195KB

MD5
dcea135baec90720471dd96c5ce0b1a6

SHA1
cbbbbde7296251366987f8da1057bf9a6f321c4b

SHA256
bef1151755ae77f1bacb9e0f5ac4dd411947ba7194fd593dbd7572a76a576323

SHA512
1aa1312f5f182d03a2cc704297e88b0628e1e24a307c19cff362f4c57ffc0e1a4321e53a09f30813a4e22bff4520e39f6fae536d862ff0aa8f80c81772dab259

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/65000b0d-b421-4266-95b2-e036a9cf0623

Filesize
165KB

MD5
e606a43017e9cfd8e7331987a84b16d6

SHA1
b6a4860834a549c514bf849f3abf14d929a0c60c

SHA256
71c34ea8e6914f234dda5d7e82c08b2531253e0e9d456c3bcc8f4524a979bbcb

SHA512
8dd7d9a988c8072c48818bd863af8ea11e3723f5b6242fa81de329495d28c82bc0d0bf59ac9eaa7fcb28070eb3e244e6fbeaaeb7e1b35c56c186e1cd3bdfe716

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/7e311c14-bc71-4205-bfeb-5f603a90e84d

Filesize
171KB

MD5
994c2f7904e880dadb6d53b4c4972b6b

SHA1
5a40418a76f9f9c5e59c5d81bbf8f79117de5e0f

SHA256
b33e637ea38e2da7692383124fcb914a95b0850d043661f9ed73b3ce960faae1

SHA512
ab0cc3d1046eeb9ff84b5ce4dde25385f6f88302562b057cff737dc0529aa2ea762f3024c7abbc7c431ddc3b00074c5138fa83e7b096b85f7687bf883ab1f51e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/8cff4705-fcca-4c29-8b60-1c0020694fe6

Filesize
98KB

MD5
ca40b38ea8abe486a28e487908088ff7

SHA1
19d9059e9de3a39e6f0bf45c7885e99ae87cd433

SHA256
1ed61a72b43162130a0dc5906bf6d9dbd5ebdc410e9f63aa912489f119d75674

SHA512
29faabfefcdffbda989fc8e85ea87e0a04e3a1e5a577d74177a8546965d8068ccf5cbb4810687145139b22696c39854c8a94320b13ccf6cd167df6bf2931e1c8

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/a7d88c62-a061-42ec-b3c5-e90ce0e99290

Filesize
283KB

MD5
7201e039f610adb70d21a0b27d3ec5fb

SHA1
f6098555c7699c419a0c12d38ec09d88565313e2

SHA256
7a7098ded55e4c1ccbc87449d15931742f1d86ca4b73957801c69a16dc267cd2

SHA512
8b471104c394bf4147a2a12ca80c0300daa3a857495bd9ff92f8b1c9dae79c77555fc47e462999b8fd49d87eb7c87650145bb047500629d4c1947baf71bac363

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/b19f1032-1a26-4a33-9712-a48901f1ab5d

Filesize
170KB

MD5
3e484b3cae0db97ee25477301e673842

SHA1
29b6921a12a909d8f1b7d125ab5828a96af9730e

SHA256
262cd37063adee9b430df39a07813e48dc4af0aa6b8f23fb0b7b712f0506ee6e

SHA512
40f9a9d97dfb2ed6f81e9c672b5be5411f9813770c7c3e36f555ef443e5d12d08e7f1df16cddf59c9217e8a223126739bae14d115507f520a2ddf83bf944e8d4

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/c14f1052-8a96-484c-a2a9-0c0dbab1d288

Filesize
230KB

MD5
00c9f3af67d10975c3aadb071a26a799

SHA1
87cefc11b235cf3c33f6767bfa95a18f39e70b74

SHA256
bbc3d7709fb7ef32980f30112c12c6e6eaa5e0cbebef981aed9a9aecc4dacbd4

SHA512
81442919b297d9611bbcfdb5920335422f141ed56a31275a6f988957b325996e1bd3824a339fc72e1d886df4c12b27121d46501466bdcdcf06bdcf92d938d6f9

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/c9fafca1-742a-4e11-acfd-f25ac9db368e

Filesize
395KB

MD5
faacfe00caa6c1fd8b4c240a00b545e0

SHA1
0df816d7a0725c933ce03246886408fb0cfb98f1

SHA256
1ba6698b4b0c2b2310aef5dcfb8bc048e34cc1e3d378edac9238812bbfe12ff8

SHA512
f4399007e88f6d4fb7a73be521a324b263bd8344accdee97083ee75fc9aa64b90f858078f3e7f553cbc45281c56f807fbb41e47ff2264e3bf9f50dd12f123762

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/d2613c14-dbfc-4ff8-9048-92a0950ed4a2

Filesize
319KB

MD5
81baccb7ec957a130bc80f50ff8be96e

SHA1
a728bdaac86b5c200b60f76e086ee43ddb86c323

SHA256
d8d632af28fa3984000de07eab0e854b3bc251c68e335d0cd6df0c54bc02a825

SHA512
fe9ef54cb8b1158bc0a9969cf3bbb28be02f253a69291c351313548da2ca93018515e73c49115afb2f30157e7097b1d9ffe8f7669680790c6c442105ce1c5ffa

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/e58cf8e3-a97e-4fcd-91fe-0962f565b9e6

Filesize
295KB

MD5
6ab89b0801d29629538440fd17c97983

SHA1
f5efcec548d1f46ef16bfbff0bff4572fe3c71c7

SHA256
c691cb08dc79e284001133e387746b90c62ba10e7bc0d388cad9e9fb01803b69

SHA512
7d813bbe05da745328baf0d0a6ddcd69bbb480fcf44affc5802cade56993d9342bf5ad69ec581f7a4a476cf39731e059c18639494292e6c8422ae4bd8e6cb993

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/7f758cc6-97c8-4197-903e-ece86260938d/eb628e31-ac1b-431c-a83a-b14ddfa549be

Filesize
270KB

MD5
5afacb2144a75c45f2497207afba2aab

SHA1
f9b75a069ff63c412c2887cef2ae2920e1bdf91e

SHA256
a4345a1bd6014ad46e2b5d5eb38e7cc4428abe2704c60a8bd229d52d31f588de

SHA512
aacaf7e5b214e5124c5d7c074de85d1cc085dbc57e5c8a92ad4ec96a134bdb5010fb7bfcb9c69bab88d1d1210be6f03ffdfc1bbf33989dff090b88fb86e1189a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/.version

Filesize
86B

MD5
94ce0b6a6f2d2ea70de3e7052fd16875

SHA1
f6af5de720f2f458baae0655e39d75f515309f8f

SHA256
9ea804822ced6f46fa4a23cffb90d1419bcac81d0ccef3afe542fa1e99cf82d8

SHA512
2ca572030e761729b90c631cab639374c63cff9273d115d96b05468352ba27cd5445c59351ec7c068f8f60ab83793718e536959121b8dae78ef4cd036b5a151a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/2f8d6619-424b-43f9-88c7-4f7dc7b92683/.manifest

Filesize
498B

MD5
26cc95e4c099bee9d0a289de9c26366b

SHA1
528792e87fa739f57f0a84e78fadd4dc7d534a0f

SHA256
76915e48e7a97f487e44080c45274149f86a2d239e94a9ce645feaa2b7dfe8b1

SHA512
7d1a57aec7a86843f1bbf16bcc968d570ac1404e2ed838a0b5e98b1a18462dc02825f3024dd126c0ad949f248e0ed8c344d6c33c10bc3a20ecc784ada6f2ade1

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/2f8d6619-424b-43f9-88c7-4f7dc7b92683/.map

Filesize
99B

MD5
7651055ccb30e34b0ed9e89154f235f4

SHA1
85ebef9d4081bce4aeb707922eee9a0d04c0e46e

SHA256
0d84acffa90695d095ee2233d2225cc568f7beaf78d1c6a1b8564de13516268f

SHA512
4987e0297ab3103397834d0b9eccb028430ce1ff8e3a328ebb266434a7e48cb0e6f785afa5ff70617837f12fe2b8f5c649c6a296d054f773417c08f520306791

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/2f8d6619-424b-43f9-88c7-4f7dc7b92683/.map

Filesize
156B

MD5
3326b3ba35da4052dfc1c24cace37838

SHA1
a95e02bd994ac5dd771c1248dcc4029c5e4f6a9d

SHA256
a51fb5aceb92630157ce143ee621fa7fe69af43d9a5715f8a755939148208a38

SHA512
711d975aee04c4e46fdc5412c3ebc511bccbf70b5d600c4508ec94e6c8e274a01017ae453f02e1cf46793f41375020c81e7f7282ad7bf00fb2ac7777c72c22c4

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/2f8d6619-424b-43f9-88c7-4f7dc7b92683/.map

Filesize
220B

MD5
c4145b1da3d61b86eda4715008aa62c0

SHA1
4bafe0f8f3f3248db7671399059d44a553e36d91

SHA256
937c77ca747f5923ab504483f4face007f8459b0e39e7aaa45fde46d68345129

SHA512
5d61de50eac20e155b898f0a0feebbbd17eb11beb92c8e2eac1e7ea34f4f3c4ed02e95868ac6eb3b93b9d7b4e0dc69935eb59863db4759f231c6a6a6b4706d44

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/2f8d6619-424b-43f9-88c7-4f7dc7b92683/.map

Filesize
284B

MD5
22953ed7c9f862c402dba797d77d81b9

SHA1
edc13873cc04dd464d5676961c1b1cdeb503907b

SHA256
89c75b6d15da549d0137914d36e738278d66f95993a3b0b6d86f162d8332f1dc

SHA512
8dd4abc2c648bbb26d90807c9db64fc236e3c51a9d1492c4b0a404322a1827676381d94c97667784938c715369115ebac039aa86277c1213ec3f0d6eb294bb94

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/2f8d6619-424b-43f9-88c7-4f7dc7b92683/.map

Filesize
109B

MD5
7b966b80c1f40be61a72dcddd584a67a

SHA1
25c2ed9d597f5eb4aa17fc46b4397e2b842e5574

SHA256
e202f6d33a8a8a1296b3f5fb5bc0742104ffcb85db6980cbf7c6d6889d05ce00

SHA512
d79857b2112e8fbfa49e4b14c11ca60c7014365b4bd82ea72103214512b173186fb7c13a110691941a745004ed7ec55c8b9a7fbdb4d185e789a8cfe284db3ea6

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/2f8d6619-424b-43f9-88c7-4f7dc7b92683/48a49d2f-6e9c-4488-b21a-e94953e8b7a7

Filesize
308KB

MD5
c6dacb6bcfcd747bba440bf2fbd2c85a

SHA1
ff2d9fdf17ab9adfd7cd41a75ef0495f11d27b56

SHA256
3c163d15b129e997225435c2ec3544afd57a1082ebb12f87a48600f9a1c74869

SHA512
6e7cb6de0e690bd8792d12959d1589020b1ae862d21ed927aa7f683898b9cecd2c8b813035b2bf3d99654cb70df391b16164d43f29e049e5666c6c931cda7d56

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/2f8d6619-424b-43f9-88c7-4f7dc7b92683/726f4088-4a3b-45dd-b38d-c9879273285a

Filesize
307KB

MD5
1aa99aa25c72307cb7f16fae35e8c9d1

SHA1
17ec5016a5f2b2ea4f27f7bce1df4192d3590161

SHA256
a0b1f949528f7a3a2d2ff3b6df67c6c1b5cb8f62a2eba6eb5e06adff2d5795f3

SHA512
1a8f5535e76188c25bb2a4c046184dfbbf074c56a554083e12268c32bb11715ca6f70bb0007a1b5915a80759c4e11060f3f599d53a45c2e7d6b787da4244a578

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/2f8d6619-424b-43f9-88c7-4f7dc7b92683/8cabc36b-1c90-4144-a049-527fa85723a3

Filesize
95KB

MD5
44850ec0ba405c1c5620ff156b3d624e

SHA1
dda0533f8a46369c980550d9a9c4264d0c90b60a

SHA256
9b54b1da124f3c8175ca6f3eff36bf0476fb2d8b4cd5650f827e8e41d1854820

SHA512
a7703788ccbb585b5c5584582ba704764c97560f283269bdbfc6a3b7c7022d18c84037530c315c4d90250f6e40f6f2ef155ec9f83e27e57c6a5da23ca150c410

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/2f8d6619-424b-43f9-88c7-4f7dc7b92683/dceaf81d-e890-41f0-95b2-a48fd65581b3

Filesize
56KB

MD5
ad4cd34327721459c11a67b4332c945e

SHA1
9c0742c0bb82288d984a37dd2642f1246e599d17

SHA256
305f941c2fab1d6ee97c5a4460f8653ff4ffec429701e2c9648befa1f593a345

SHA512
0e77745e3cf711c958e443b6b2b1a417dc88023ec1c668a0f7e1f7944c54abe78015a8a94197353ca486ade639352f3fc4e1edc215191b7e7f6fd9ca2f9fcf24

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/2f8d6619-424b-43f9-88c7-4f7dc7b92683/f26f1f8c-f887-4af3-b854-e655f2a9ae8a

Filesize
547KB

MD5
2367a2c4f94680d5aea44f06048fff3e

SHA1
41af68b7b2d4a3c1378a1eeb190e0fd8020f02d6

SHA256
aa2d31dea9ce8bd4801ab6a74f0e50707b04efd1ea49f8da58165020abde9c75

SHA512
0a2c11c6bf5a9c48f1a114ffbbede2279f3dbf11fc18b0bafabdeed6d4d9dcfc0e42140f8587edc5d17a17a57d3a805fea11251b7735f7bc569018d6c6a4d34b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
e1e350da80fe29272968a00373aed460

SHA1
f3e20c08badb822b7b52d7ad52d62ccba7118f4b

SHA256
9313099ee500aef58b912b9e790e0463457e84f26deb4f73fa607cc60c62f375

SHA512
154be6e30d96195e9b2165b2e34a845533ab295fb48d6e5de38060de56ac8f85ff69dc29d133a42b04e0e11a8b4f0576ba006c731da212d77cf8d14496c0e3cf

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
c91474b4ac551baf99a43245dd78bf1d

SHA1
dc9737c36379724b20dc8c8e85cb9347cf5af4c8

SHA256
3230b3de3aecc9f96d8aea5b8e261e80911e5f3a81feb7ba2d21949c1a2a42be

SHA512
909ccfb6a6961565271e935021106adb7e6e09155f0397b7b8882b93df438058c1d528843e9cb0d57cd3e7c07df4d5617c027fd32a4800fec03e3d7b7f6ca612

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
8d51b15f64f649483a702aed215bab86

SHA1
33e68eccc7da83219803cfc0c0eae29e2663a6cd

SHA256
c1f388624f226077de12d5260bf1a0a9c3d1a6f9c41f397974697aa15f3c07c9

SHA512
24e17be750c001641626248854a3636e554f574c58f110ef94fdde12ab8448d57d5a1afb19b865dd815d74efc4e7f0ba7c51fad9683e490f674fa3e4530565e8

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
96c810d1f08694b1884044e59279c338

SHA1
d5a24fd2a49a6cc738bf233572bb289c75fd8991

SHA256
910db072f1b8db0663ee5415d68eb38d23cbf2f77227b4a9e66678e383b1b0d4

SHA512
31379a09892c9fdfc7f9f90a5e91ed7587533c1e86ab5a45731155dc2392a3904726da23b7735984fb162797c547d679928b08a1b68e15612f454f15b588ef85

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db

Filesize
4KB

MD5
9b212a8e1b98485530929ec20a75b3be

SHA1
28072052530e0e58441e86873550cc332c96fde5

SHA256
adde14f69522445368e48393f35397bf167f88d7602072d8f184c7eb256fe717

SHA512
4d367a780e8a37197257588afe570b7893031e2d9326b961c02d82bfe79abc64ad54e961527051f0d529d4c7613048dcb102a1cb0a7dd146c3110559fda44856

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-journal

Filesize
512B

MD5
71d3a738cd90682bf4a183a45994f368

SHA1
637cd637cea8f6300bfce93ebc75fe460f2d9e86

SHA256
891b09516d5ece98a8d1ba0fa3da6ca69c1ba817f0ffe0d769074904bd540f76

SHA512
f186c69de915fc18b131d44e085657f422b3976640ad34531d7b3f65b4ed66d2127bcbdc3616efafa13418bfc7cfde06da827f2416ada58bab42dce9c945e784

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-wal

Filesize
1005KB

MD5
b167379a8403109e42bdd3404477e071

SHA1
71587110e581f6c36d652de92da2088706891f27

SHA256
3b8168f854eb05af7f965f3121766287f628a80e9c1c9b850f524c3523e6fc52

SHA512
670d7a1a117753455a73dcc984d18401e73345ede21b3b51179771e50586d66057974a21a8846360c3f63ad6f4c67e9eb5ba4d493f5073a95853d8278940d43b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db

Filesize
4KB

MD5
74cfb1368d62c89f7d9c9ec55db4a857

SHA1
14312648b784cb6d931c99df4e32f697d7155f2d

SHA256
361d3dbfff12daf159c00f9e2af548866db3c09f9596d70226f04251fb20269d

SHA512
f8441570aade1468a0c569ad3cdfd08a542feb29634edacac117f0f20c70f47c748331765038f252cd7e81288aad3c910816066f1d51cedfa9d2a7de4842852f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-journal

Filesize
512B

MD5
3cc671e11dc86579bc83043fed92db40

SHA1
031695820caefb73bb04f9af369d42d355104035

SHA256
34dbb78db4525261abc8ac9ddde256e641c6143fc5f9a058fab67c985f3428e8

SHA512
1f99f85f11cb88e0231b93164d7f811a0cd45dd0977edd6a008af3ca18283d511edd256b28340aeba4a9f8248977863d8cd4ca536c802066a5e7571dce0a0dc2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-wal

Filesize
414KB

MD5
0c97bb6cfe39858d986e9b8cdce91dbf

SHA1
3ab8b8f962931a24c3afd1c4333915a0fc2ac9e1

SHA256
eda8063e19c6c1d799e2e7e669b3bd9550ad075de2f23b1f464d970c07d8a693

SHA512
13b63acc3ec5067489e0abf851b8eba049962771971efda9fd941b50f1e4f6e1504b233e990fc16c02d5660a138a1a70fc49cbd99a90e521c8003eb195bf7086

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db

Filesize
4KB

MD5
688b75f7d0a14b0c15656dfd55f8b798

SHA1
ff2a7f27ad9f279cde9dba07cc7b56fd47c8749e

SHA256
b1c207abba3cfd649bb7b97893e058688d4302b8a869155cdf8796f216f4d922

SHA512
6ceddaaad1c30dbd515fc64047eaa45f1171f1b296ae7be120ef0efef0e0281e7b979bf3e1b061656e99c973752b5770e7f0211992abad352dbba3a9e7949439

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-journal

Filesize
512B

MD5
1e8fcf005334b7203d8f5881e536251d

SHA1
796fbf5006728e94a8bb2580996324ad0b093b4e

SHA256
7e2c5b17a13e7c73abd69f527d7d90fdf32b034e7afc195822a8d124d6efa9aa

SHA512
aa3bde8ff4f837635cac476180b09e341aadbebe743cbe42e7fe396bda31893393146a45ad553a3285f1c0ac83ce8afedc365fe9bfd7081e8db6b1fff5d77046

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-wal

Filesize
36KB

MD5
089439691c172567854292a7e3305ac3

SHA1
24e8d5388496170568081a67d36dcaf9c0018dbc

SHA256
c5f3a53da7c36e38bf2db5a232311a7d14adb41e660151402ea7b675fb6ef53d

SHA512
9ca4bbe130132e2865b77dfa0b7fe37dba0afeb287719c3059d47252cace43ca1851deba4a8bd64e0bb8a51b146c4022b0781ea7ff4a7f012ab6dec9d25905b6

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db

Filesize
4KB

MD5
c37b244e4904678276b20b69f8865907

SHA1
232dcc5c22f8e23bfc7352e0746bc635b2881917

SHA256
247c612ce222c3600e845e17c3a7ca260cc817a03d9e5871cbb089168b72dcca

SHA512
6c7632780e1d22f772e3abb77aa79e2e3739a2d0dcb489ad037b9916a10b3557a6e68c29e6c57b1f9fc3f656542a1efcdf8e439de39862630a5d3179121d86e3

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-journal

Filesize
512B

MD5
1fb79b03e536fd1b5e839c1c75267adb

SHA1
b9fccd12b3e3ff65aac1e897aced8693c0f33ac4

SHA256
893a83849eeb7082905247a7f423844c28041d97a89a281a0438c034a935cd22

SHA512
02d45ce046c744335ab74c9e6cbfa9d10777232fa0f0d401434ae855149083274636f2f890c31212615695498060918b9fecd885b40b4c22943f03e49b04d919

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-wal

Filesize
1.4MB

MD5
42df05bab4a9ca4d6d127efbed83071d

SHA1
e5b0500b7ecbc58f7f41d185fa5b24504f24cdd8

SHA256
e5b46b8631df842f0b336901823794d9a991e8fd1285096511130ef3c9d43c6e

SHA512
989b650dd94aaa21ae6a916bac398182cf894357d0554fd795fc50b130a75ffc78ef521587c6a62a8cfa430990f71d8b9e6fbeac613e5164b1f72bdb67f542b1

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db

Filesize
4KB

MD5
0cc45335f29dcc665f3c3d2ee06d72fe

SHA1
b5833472108350b5e733c40832c9c11e5201bcb8

SHA256
89701af93db13b28194a73144163c1da33177723d7007f77a78cf60ee4d0f455

SHA512
bfaaf98a12ce43baa6f4cd92a4e073fa8a34471e0a2fe120ac2f51f662c38ea213fc1d66e62c9571e19a15dcfd73ca2769fb844d002fa162e10a300428a0c5d2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-journal

Filesize
512B

MD5
dda476a04f4d264bb8c6119ef2256da9

SHA1
07526257ee2ac9ef9e53931fe5ffe01f37311015

SHA256
f86eaa71ed2c71d857058265331ebfc6595421525b6672b6d3703abd1e0ba73b

SHA512
6ed6723744011d340f372fee7dd90c1574cf21360fa224b72c8eef833e806afdc5165a30f4f94fec4fe59ed604ceda5378f553b158519d7f95e85e7e78deb2c6

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-wal

Filesize
32KB

MD5
afa4b27f2b4c4f48ac35c30fcfd7ecb2

SHA1
79f4b9de7954350fbb8faa3c044beea815aaf53f

SHA256
b6b91cba0bca4ead9d8eefc55ef2d70bc992c6a4c33af93ea76570e4a4c13eb2

SHA512
65032dbae4a14ca155b657adf9b9b2d89793895f7832430dc05010261f7e6434b7ab6f4fd32af4bea51e008bab06774a1706ee5ae520ea00405905c27fec7568

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db

Filesize
4KB

MD5
da58956ea58c6fe7281c58ae34dd5a41

SHA1
49424cd9e0db9f2421f824143b4d241c765ed1b8

SHA256
6c618fa98363d14025efbda403ec0e256805bdbbaa6381ffc262551edde550c9

SHA512
a955170d91e883c948588b74321cb052fb8438f4428c5769d26697a2481465eaad294c2656c207a0e51107ff1bf5684db96ad6055e73affaae39b53a0466f171

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-journal

Filesize
512B

MD5
52cd1ca6fe9a11bbd2a0b303d5035e78

SHA1
59a69f444d51b4c27e0dc6e5cefa600d3dba3e3c

SHA256
09526bd58c790b052eaa3dcc84551941b54a77065712668397166d61348799c4

SHA512
8cb0afe87341af6f7d5e914c88c07e7c9be13638fc188b3428d87354a3428834cd519fb5d646f977c1db4069fbaeceb90e65e86e6ffd311eb64eb5d27a206ec9

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-wal

Filesize
861KB

MD5
5e3399d1096984931cdd9f9998d956b7

SHA1
df101025f2900223153c9e08e7d7f725753abf29

SHA256
60e26c1aae89757579ba92d612400cd93e36f0bcb9fec3893a9bcfaf786d6209

SHA512
c16c989a83bd645440c77b76123dddb6c99d368dda261d573a1e02237d755e31a6a84c8a9ffbff2427480b4a3ccefd2649a1ea7e56c06429d6e76d89beadaa9c

Download Submit
/system_ext/framework/androidx.window.extensions.jar

Filesize
123KB

MD5
3056e1bdb7d4e19789d0319eff484bd0

SHA1
6791ae47aa9466fe0bca27ad6643f846853bbee4

SHA256
8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0

SHA512
c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
25KB

MD5
29469324e59dfcc052f24b5af4e7b2c4

SHA1
10c1e17ac6f598037bb51baa07945663645de4eb

SHA256
9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a

SHA512
5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads