badbazaar | 549d726fe2b775cfdd1304c2d689dfd779731336a3143225dc3c095440f69ed0

Resubmissions

29/05/2024, 07:44

240529-jk595sfd9x 10

20/05/2024, 06:02

240520-grv2msfc7v 10

27/10/2023, 07:30

231027-jb7fvaef28 10

Analysis

max time kernel
67s
max time network
325s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
20/05/2024, 06:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

signal.apk
Size

79.1MB
MD5

76351b5e3b9487b0b39759dbfea5f0c9
SHA1

19e5cf2e8eed73ee614b668bc1dbdda01e058c0c
SHA256

549d726fe2b775cfdd1304c2d689dfd779731336a3143225dc3c095440f69ed0
SHA512

0f858b36e47012737de9ca88399a4f95740f6ffc3639b5134aa418ccee441af905f1e503775fb741cd3def7931db18b517a8b2f07c4f0576f8f79ff9fb3f3fa7
SSDEEP

1572864:U/u4rrAgdZh87ZlyFLSnI8LcejgNtwQYpxtIwTJSzslunYuTAO:UOIeZBI8LHUUxlT4YlSjTb

Score

10^/10

badbazaar discovery evasion execution impact infostealer persistence spyware trojan

Malware Config

Signatures

BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
spyware infostealer trojan badbazaar

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4607	org.thoughtcrime.securesmsplus
/system_ext/framework/androidx.window.sidecar.jar	4607	org.thoughtcrime.securesmsplus

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	org.thoughtcrime.securesmsplus

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.thoughtcrime.securesmsplus

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.thoughtcrime.securesmsplus

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	org.thoughtcrime.securesmsplus

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	org.thoughtcrime.securesmsplus

org.thoughtcrime.securesmsplus
1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Acquires the wake lock
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4607

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.thoughtcrime.securesmsplus/app_emoji/.version

Filesize
110B

MD5
64bf8b0bf30c3497f8da3a41a6b0ac76

SHA1
1228aadfb3cee85c5b8aba1abf8172a97458950a

SHA256
62d3a65c3267537f621cc6ca1a8d2abb3d867f3f843243b7d33e0ae73954ed5f

SHA512
8d0d9c2d9a30cd537f6b7adbd71727386613371ad8ec3cc2180f173bc4d1fb1fa8b9061204cba109d3b1b33c33bd4720468ca62dc65faecf56d452314ab45f29

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/.names

Filesize
169B

MD5
91d8935891efde90ff485b15158f0717

SHA1
99693344c5f80ac47116cc80c9b1f7ff0ce7a58f

SHA256
b5e45611e3c5a01f42620ddb444e8f600aedb03ce387918532830b09895a02d6

SHA512
4eed7031e90cce06b0ecd81eb23edbf0fccd639393fdd1f9adaaf54da3c3ad834ad2d140d5152faa91e486ef14361cb75bc3e9c11f50362a0f156ce51b57fcb1

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/.names

Filesize
235B

MD5
2b13aaefb8d791d7db57d8018bfd5af1

SHA1
d1bd7080c2577fba50cc5cef7f65f032ce53059d

SHA256
850b49e7aec0fc437dcfe930d783b4e1c99968b0bdc156eb00e8d719466a0c30

SHA512
ee0d2f4c7c3036a056f31b3013772a29677bb097832fe94e57a9610b9c4ee8d788e8c12ff0687143dc678569af410f3dc7496f2ba0d53b08565895d792ec82b7

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/.names

Filesize
301B

MD5
8395008fea290f37524965c7b1e3124d

SHA1
b7f7c2f449d5837a11ef9fec53118ac266192e39

SHA256
64b9da3d305299c6ec028eab724a586af6dd0569b7b480ac2751d2d785de6ca8

SHA512
3662a63095680bb82dffe853cf446a4b7e0a0a3935a5a73e6b83923d15490aae59fe3a46543f7ffff98c583d8c105ce92a9885e30f466629fdfcf3492af5bc8d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/.names

Filesize
367B

MD5
54a402dc99666cb8ce80375733c57837

SHA1
4d148a3cb3d0a36a76f32b3897b384967771114b

SHA256
888105cbada2f62045483c2f3c1c521cfe9c4e75b282cd7cee64584d41fab830

SHA512
9c2fc7ec9afda38ba3300c2a935d621d7d764c3d31ef9017ebe58f4d2e55580837ae7b247547a9c3b38e6bd73d26d32f3254127c4b298bde72c38b21451fb53f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/.names

Filesize
433B

MD5
f9c2b35784bd31a9fcba45d6ee1cc729

SHA1
9aa8223c3956306bd87ea5de60b8417c8e5b4428

SHA256
03fab5261ae5cbc19291c337275b8b8aae5014201f08e9e222f16c7b1ec9ecd2

SHA512
192cfc66073e1e02f6a0db0fb76c79d4e70562814e76c94b629fe711fc621fbdc1fae6324e9a14b2b220d26ad6927ad6b57dff8a9698b47e01139a2cab168735

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/.names

Filesize
1KB

MD5
20c2e7e5f1f48ecdcc52e7e24783c24b

SHA1
7f13d14a17e3cd80c71e13d1c847e93890edc7da

SHA256
dac5e3ec73d0ec452594a6225a9a8b52b6acd0e4eb94c90dd28267d418b1355d

SHA512
2c65c7788c31baef28c9774057b87e915b9d95da57944f99b792d0f82dfeb5bc732f66e0ac0917f6663b784db8e5a8c083e7f26c0e98ce4decc45c8057b3a22f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/088ba603-db3c-4d63-acf8-e73293d82c38

Filesize
395KB

MD5
f4f5294321408abd91397e1ebd656e13

SHA1
4e654a3df8a34db22508d8e059ef421aa6e9812e

SHA256
2921118462aaf564c196f7afb5c6b8e9060c548c42c2eebb2c09ad7cae7b8b35

SHA512
2f1580f890d7d7feeb74a7e6bcb683d8047797c6298a5d1e2bfcf94f0b4a5d354aebf70c05966813a832efd708a9cc79888000b2a98f210cda419c922bd77cf7

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/0b61831e-14e1-438e-815d-73f1b22ee2ee

Filesize
230KB

MD5
f3dd9d522b2e04ec7ebd4a84b54af880

SHA1
3eeeab8e1c973a16c5132ef2897afec0bda7dfe3

SHA256
8362bf9f97a64d24d0806e55f34bd438302a49ed84a870a1935366e35b1cb8ad

SHA512
b89b95aba2d2bdd2d88148ca7224ca7b4b55fdddee9def05e4075d412268b6241870a68638fc7a639e18a403b7b96a6faa82e21661553553e5c024f50c67e629

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/306d3a28-e526-4a89-9a14-ec060a501922

Filesize
165KB

MD5
d7db6d180abec8c2d41ae6c373cccd7a

SHA1
d48778e87f29c8581a1902cb2ba6bc6c0feb78be

SHA256
341f98c1027afef42bfe8161eda2fab637aef27249f89712e5f77ef8f93e6bfc

SHA512
f6384877e51f49be32bb5dfc2afe0708e4ca22b4ed555bc8d970a1c447827fac2fee3ab147e941ee4dc2fa1b92d419803dfb4ccca4b09738315d09d890313fdf

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/334974cc-abac-42a5-9693-f907235df5c1

Filesize
186KB

MD5
3421697305daffaad776c7c8440017c1

SHA1
510ced84de5d25e89ed7a8713bb891f253ec822d

SHA256
24ac961419e7cedcaa8ad1b20519672f8f3e947096b80906cc003ea6d5f69e16

SHA512
f57eadb6aa919a89ae6006e657bbba0df18c7f1ed5d6f319b033e494e27d6ba68e776516df702fec1c6db6dfe71ceb57dc552f78729f09944c81d12e32ffdec2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/39067332-ea28-4031-8fda-be66465cfc2b

Filesize
285KB

MD5
4ee75c3c71789d7fe8d8c99039ee7d5e

SHA1
495092880ffbb29eb86c6773b9711e26373eca76

SHA256
168d38f53c80d14a0b3c3380e15a3f1db01d0b47ad950ac8f348eab5361973a7

SHA512
7dcd1d81d47969ca7b4e4c658932bad0a1b62a1beaa9fb08967c665dbfc7595a6f256c2857baaa132f2828e53a9595abc46784ca6c656b48d2564cdb66ea1b86

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/3bafde19-20f2-47df-812f-bd2d9ede2d69

Filesize
170KB

MD5
2ab5e4840910a399f6e0c0a2db44f0f2

SHA1
63278f2f55d22e604f217ae18e7fa7a207718c8d

SHA256
d611de881796188aa9ecea1749514b8afd9910b42ca6588b0122a9c474133454

SHA512
6fc392ac47079ccd57da1a70c7433b67395767ccfc4f4fa5e77fbacbb32e55944ec3e04a3cacf95c546905722e901f7def93e63946c6fc74bb6fc5feb364cfce

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/49e2aeea-79cc-4674-a653-69d9c9cd4392

Filesize
295KB

MD5
4e24b69dba07576915c67bea2ebb45d9

SHA1
32e0ed4da3ec92149b306629c649c9211e17273d

SHA256
e8cbc51fe468b0f2d0dae9a9bdc162b3170f33efd1dffa0976bddf19e74f6905

SHA512
1d4746f117dcca7b200b6708c06f3d4fc19f7b8875d8f98c1b79702b2b545f5f0efe6abd7ef2fb986e82a9b02bd28e72422d6d27885d5af452a4c9fd43ed2e1c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/7082f139-7957-4107-8241-9b1605b008a8

Filesize
310KB

MD5
ba7e69cd41596cc78107cf6602c39492

SHA1
63f26eb229e61e4314f5c3ec897809d5e0f309d8

SHA256
98c09a19ed0f361e7a8f8a61712e03a3bcdf21a329115a36fe459d8ec7ea194c

SHA512
80b208ef8814d4538da389ff0825a421b4c84e6c34e906b04d511662288923fe26f5813d933fb246e5118feb5a1c3d06b7aa9f57405a5ccfb7afd90720a2dbd2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/75106224-07ea-4fdc-ba27-cad0cbd0d233

Filesize
195KB

MD5
cd9fa2bfd1080d53d2aa91f6f1597939

SHA1
13a1dd754a1cd6b76707814f7e66ea1855b35e94

SHA256
e74e8b481a9d10f4bb7246e4cd0ea73b2c4279e93c8542a60ae24547a65f4519

SHA512
9d80ad4a346cbe1118568b86659aa2d16aafee19d13147a70701864af94e741148ed0b7af295651bd9f39e2c51d537f2a30ae8bb4b0d6b80f033658ddde9ec40

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/79261fa4-1062-49e9-9c71-37d6ba9f21d1

Filesize
283KB

MD5
f6726b47f426c412ef78b327d1c54db7

SHA1
176056abd00145bcc0db71ea976c9259f6000e3e

SHA256
63440bd24209a85caae7b1fd7628955b3c74f98858e40a59335f7aaf551d9851

SHA512
fbf09904c310f94f6702a8205c1fcd810198de3f04f0e40370daa400e92963e674d2f565a1fc33e6e8526507e2a4df4d189946888600a68c6c3bcdc9af7d52ba

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/7bdf978f-cf0d-4dbd-9cfa-f539b1aa8871

Filesize
319KB

MD5
b35f814e8cec23ea435141ce4d1be94b

SHA1
6410e63361a6d6dd0abbaa6c878f5ca0f8912fe6

SHA256
76f53a3220ff38da0fe90ff2415b1c49638cf4d22e664b16b73d8e090e13ffb9

SHA512
b889c81bd331ce49cb3a2fb88eb516e2ea952668326d87f455da497079c370592f1b0569c50e5bd501e2b2a26cf9d3c7868c7e4c7c66a32217578aedd20f4577

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/7e61ed4b-72e9-4354-8c3f-7a1e512b2e48

Filesize
171KB

MD5
a52fa4e594c314c6ffae6441ef9640cb

SHA1
fc4243406041df22d5c8418615fc70b53ce49494

SHA256
d2b98b5d0d998c9f0e5f62004bd295495a5ae74888bdf961fde86f056a491e88

SHA512
12fbfbb4a95176a273e6178764e3f4cd2832daf037896575047b5b54f10fd07921c91a974878574880af3927587b178722eb30f7bde3f858ec32b9f57ee7c5d0

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/8c30b25f-a12a-4e2b-bbee-6db1dc94f43c

Filesize
160KB

MD5
4caac1705d06895e77993080cae566a5

SHA1
8c8f340c612af60ac59854b640fbc89a1d5b3b67

SHA256
9631328c39f43cda973be2f5e9583274e8cee89d86d1901d305502362358f847

SHA512
eceeaa06cdcc84b98ef453d046a20dc70c2168627494944c88e919b95c1a039dbeb0bcdb4f51766e3f7a811b1130c35a87d11a4dcb858b3409f73ccb7a49563c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/915f5437-f02d-425d-9975-1bbe771abcd0

Filesize
270KB

MD5
d1c0f4e0ac3fe9f8b3d95caf06b40d27

SHA1
85cda1c44ee340628822b71007756f96c01590e9

SHA256
29d1e68370a259b46a89a097451b2d1e812f8c2b00d0dbe280efe15918006b19

SHA512
543c0703fec06168d62614dc50a2bc0a7cde5b48c3c7b558fa64e148c6f3f2b6fd9aa7362d6cafb88b64a74e68dd1fadd606202a11b5ddc90a86320758463d01

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/93daf5ec-e5c7-408f-b41a-6fb680674e55

Filesize
286KB

MD5
310b53e13050f54f3b9bd2915879f433

SHA1
3055de97178f6586b567a2258989264b3a27c8c6

SHA256
05fe9f8f9a41612d4758daacf79a406da7083df98ee96a0ebf2f2a46528eff01

SHA512
699751992f6bcd25f4962e50d46e45ac55e46d231286a5b4e721af2291e019e9b2b9542e1505eab0727fd5c7e950c4ca7e8da730c55591c0864de43dc925da0a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/9c818c3c-0cc0-4ff2-a2fd-2bf9be7fabd7

Filesize
98KB

MD5
799c76ff34f9a6efb045051f6722514f

SHA1
a197dcf72a38119b8706a8fd61a1845eb5122aeb

SHA256
bd99d8356afcee6a1d61026cc8dffb7308fac0172e1a69250c84951e66503237

SHA512
ddd19853bc9cd88a5455708611efff1059541195368cda7541c69ae8641ef91b9cb0801e0468c72b8bf63ef78c0bf5b3c3709e30621485f8e257ecd76c2d0a0e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/b06f3cf6-5a22-4db3-95d1-9a69246bfa3f

Filesize
308KB

MD5
e550e3e1a2fe4f120d462594bd767577

SHA1
6d1bfca0deeee99b9bbbba897950f83c3eac0b2c

SHA256
9362a8c7f9c5809d0267c957d9db178064ef6e51fbd7b0ea45fade154910222b

SHA512
3a58df4ad9c330e8816ec7a46e67f6b1674e05bead16f14f693704af688154f63272347521fd73a7c64c4ba534dc8b0fc631953223dfaaf534f9c408c3f5a93c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/cf983574-d0ec-4618-8b9d-0e648bc9777f

Filesize
155KB

MD5
0c46106ef2f6c937648f9638bccd2a93

SHA1
0862e69614eafc530f07c2336ad87b1a06c8181b

SHA256
a01158ead454376308f386bcf895416513023f789cd459713583a725d80e8666

SHA512
f5e071cf9e114aae8b46a5ff2be521c5b34b9551ffe2d3a758afe5582d4c9bca43e961a1058de52d4fdfa0a27643858d3a16bb15c90ddac62b21cbb1bee8b956

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/e3f36b19-ab4b-413c-8903-4751608d8cc5

Filesize
97KB

MD5
61623aaa4e068d886caec2fdf229854f

SHA1
b7ac90342ec9ea0ddff346981cf725bafb386365

SHA256
6827b761459766a6161ee436c868c6e3c4b0390c04739525b6d4fe1933b04344

SHA512
17de53683cf92190c2b19a8c45dcfeb38ad2bcdb220613c2739290574ec4e8e94e04950303d38bdd7e07bc853deb2671bf5e951e60b26c07552c5667854c9b57

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/d605a4df-c26f-4e8c-8a6e-82ab375df04b/eb40052b-6dd6-4c9f-9b8c-81db005b378f

Filesize
117KB

MD5
ac345bf2f64ea16740c6f1839a135b7a

SHA1
14f95a7c5c4fa23567e0ddd6a738b98480cac985

SHA256
0377e6866cfcbdfa19a320705f0f7b829a6d50811462457bebbc2a314f716b9f

SHA512
00b36828296e6b1dcb3d4aa0c3dc3152683fcea2909abd4aae9b89e73bf8698d15888f3b26f6c9b4ade26152070183a236c1fc2105c5c8093d43c7e3659a46bd

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/.version

Filesize
86B

MD5
d7148af03bbf3b8017b966dda2879ce4

SHA1
98ac75663edeeba96a83d3abd51507bc2e97f388

SHA256
1a888cd7e756ebb7bffd2e47ecdfd813934bd54f36d7a0c6bbc0dee49f2e339d

SHA512
36a5722cf8313f94c80bdc85056c68251033200fa5abd1fd9dad4dc74be64b3964b65860e6baa3a43a7222f924d2adf4b3bf72be2b3b88efc0b94e256f46a08d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/eb5e5f43-c141-4dcd-bf0f-8774bcf5b0ef/.manifest

Filesize
498B

MD5
09a180edfd2947bb35887166dcd1558a

SHA1
e6970a217247d4e56502d9bdd382d8badf3b8908

SHA256
7b32fa536f888fc18e83df6198635cceee419106726a831dad00fc272810c41c

SHA512
5c736c6329f71cd5b00b95b16b7ec64506c715c600d2c72efba0beffc96b24a788e903edf96fe3c4bf1a1d4f534ee69a54a1a4581a1e5546e9027cfef94a136c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/eb5e5f43-c141-4dcd-bf0f-8774bcf5b0ef/.map

Filesize
99B

MD5
0c821a4190cce7b0d5f75e599aa7b8a4

SHA1
7030b3259171aff80bc6b19ffeed42805d8a3973

SHA256
90ed3af9a041c79bafbae51a3adef09aa130c0d2af85cfb15cb51254c50ca052

SHA512
cd8a79a40b9b4b26ddc0018d5e42311845638d95d0ea01f6dc333cbe8c42fd2c1c5541559ceebfdf0676a4fe6bd9fd5526c8b19ff0f38905447d57886d40f2b9

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/eb5e5f43-c141-4dcd-bf0f-8774bcf5b0ef/.map

Filesize
156B

MD5
cc71bd44a536243db10ba616ad1e11d8

SHA1
bf677ac840d68fd129e20097c2a13421b7f4c35b

SHA256
4e16b3593645c5613773506f78a96394c7137541b83b1702292aa1a312bbabb7

SHA512
86d4e704c5727757aecd3eec6723a2820f5ded1a028712f3f938234edc0395a4b9ee59988960f6a3c8faa54fa5d8df6fd454af15e906ef621b07d3c4e739a579

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/eb5e5f43-c141-4dcd-bf0f-8774bcf5b0ef/.map

Filesize
220B

MD5
aaf886ce5c9b0cce2133e0f80ebeec56

SHA1
ac1eedf0531cd71ea3bd34cffcf88f0532d27b2f

SHA256
645d3031498accbcb78899cb1e38d7e4cbafe62c8ec9b88bbf2adeb3b0019831

SHA512
b836d4cee05649ede24b3f1b565e6e1b51f8231af451e858fcb4297498ab7119085fd89aa3f19a81833ea2339fa7e7f9f1ee50b1ca3a3b8d833614ff04d2d495

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/eb5e5f43-c141-4dcd-bf0f-8774bcf5b0ef/.map

Filesize
288B

MD5
81cbff2c015e412f9dc3f0d5444dde8f

SHA1
5a60cc744f0d2b64845961e1bc691cfd51b67228

SHA256
fae0d47e92fb5ddc477af9ecde18d9fcbcc0efd44117562cff32f48adecf7ce5

SHA512
0059dadef6f2be46ce031acb5d4470ce5b621213063e8323103dbcc186905244c107bd01023a83dc834b457491242efeda748578842f46590a4d4924eca10209

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/eb5e5f43-c141-4dcd-bf0f-8774bcf5b0ef/0c85d66c-5b80-48d9-ba23-226b07d5cfeb

Filesize
95KB

MD5
44850ec0ba405c1c5620ff156b3d624e

SHA1
dda0533f8a46369c980550d9a9c4264d0c90b60a

SHA256
9b54b1da124f3c8175ca6f3eff36bf0476fb2d8b4cd5650f827e8e41d1854820

SHA512
a7703788ccbb585b5c5584582ba704764c97560f283269bdbfc6a3b7c7022d18c84037530c315c4d90250f6e40f6f2ef155ec9f83e27e57c6a5da23ca150c410

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/eb5e5f43-c141-4dcd-bf0f-8774bcf5b0ef/540d9623-ba15-4cda-b0cc-86397c911886

Filesize
308KB

MD5
c6dacb6bcfcd747bba440bf2fbd2c85a

SHA1
ff2d9fdf17ab9adfd7cd41a75ef0495f11d27b56

SHA256
3c163d15b129e997225435c2ec3544afd57a1082ebb12f87a48600f9a1c74869

SHA512
6e7cb6de0e690bd8792d12959d1589020b1ae862d21ed927aa7f683898b9cecd2c8b813035b2bf3d99654cb70df391b16164d43f29e049e5666c6c931cda7d56

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/eb5e5f43-c141-4dcd-bf0f-8774bcf5b0ef/901e073e-a960-4a43-9cdc-580113ee9b2b

Filesize
307KB

MD5
1aa99aa25c72307cb7f16fae35e8c9d1

SHA1
17ec5016a5f2b2ea4f27f7bce1df4192d3590161

SHA256
a0b1f949528f7a3a2d2ff3b6df67c6c1b5cb8f62a2eba6eb5e06adff2d5795f3

SHA512
1a8f5535e76188c25bb2a4c046184dfbbf074c56a554083e12268c32bb11715ca6f70bb0007a1b5915a80759c4e11060f3f599d53a45c2e7d6b787da4244a578

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/eb5e5f43-c141-4dcd-bf0f-8774bcf5b0ef/96cb4ebb-e483-4444-a41d-62cbf8b0decf

Filesize
56KB

MD5
ad4cd34327721459c11a67b4332c945e

SHA1
9c0742c0bb82288d984a37dd2642f1246e599d17

SHA256
305f941c2fab1d6ee97c5a4460f8653ff4ffec429701e2c9648befa1f593a345

SHA512
0e77745e3cf711c958e443b6b2b1a417dc88023ec1c668a0f7e1f7944c54abe78015a8a94197353ca486ade639352f3fc4e1edc215191b7e7f6fd9ca2f9fcf24

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/eb5e5f43-c141-4dcd-bf0f-8774bcf5b0ef/a7dcd83c-a993-4f80-8f20-b0eadc328403

Filesize
547KB

MD5
2367a2c4f94680d5aea44f06048fff3e

SHA1
41af68b7b2d4a3c1378a1eeb190e0fd8020f02d6

SHA256
aa2d31dea9ce8bd4801ab6a74f0e50707b04efd1ea49f8da58165020abde9c75

SHA512
0a2c11c6bf5a9c48f1a114ffbbede2279f3dbf11fc18b0bafabdeed6d4d9dcfc0e42140f8587edc5d17a17a57d3a805fea11251b7735f7bc569018d6c6a4d34b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events

Filesize
40KB

MD5
1cf3f63c021d755a21623e6d0e86dbc6

SHA1
e40e0f1faa61abcca7ba3394c54c92ff7334b49b

SHA256
100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895

SHA512
38d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
9f3472c89ce06ac9e0438d5d96fab08a

SHA1
84c497217a6989212fdc754ac0887501290b9037

SHA256
36f2de72e5f51f72219f428ca7b749019426e7dd788e4cb6b8db5f3b7cf13bfc

SHA512
5bcd96825dc7520afa406c92760f52434c5235df8c08be6fa1859f62c3da13121ebedccf347d2e509bb57673b972e7fb4db5c4c9145804fb6a5beeb0c8aa6705

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
ca9e5b65ab563f2b3727c6d79ac981a9

SHA1
8c2203d7ef769576c30b5fb49135b4c2226b7542

SHA256
9789ee8ad8bf6c018395d9fffd798abcd9b32ba83ef3dc35df02d839ece8d8fd

SHA512
a1b6d0ba6dc636d301b3a906fd29f6f54e2488ae67f2033ec182d7a9e22cce10dfa121256029fc66cf2727b7345d61084abcd81085d7c5b462d2e226c71cce25

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
2c54ba0873845b2793cbaacf04118779

SHA1
1a3d782f09e4bdf647f7683ab41ee962be8f4c39

SHA256
9aa3cda60e6110af9cf4f3113933114d6fd31ee20a1ae351a13fed8b786e741b

SHA512
4409d6e34207f51927c73e42e4e02dd80245a3d1e0ab753ede1fd6e2c90befb133a4a8d90f9e0a2a84bd33d93ffad794d4cfd76e4f65da82631a8798a2a4fd6a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db

Filesize
4KB

MD5
771999a96c1f87202964d2b206e5f16c

SHA1
07db86e646471bb64ee04af0cf5a407d41f1e8ab

SHA256
e296dfbb43314aaae0eb17975c6d50bcd946435d92b09b8fc3b7d1c28668e89c

SHA512
d2809b1cf126670c035a754a3a409f9764a37aee12e3b4b350c24c78774fe57658ec083f2214a155a0594acf58445041d9f7fdc0582fd708b03115a79daec2c7

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-journal

Filesize
512B

MD5
394fdb617e80aaa75647b185908369aa

SHA1
a37de712e6f7f2534c33f0e23aee453840dcb942

SHA256
833b5d4ce4b681f25d813c6171a0878226a332a680b3e04ed6e738d1416636ee

SHA512
da5101642cca2541d28a773a769dadabf96de6f5f25d8b265a8429fd8ad3f8e95a44a66545c31bf181eec7d0222a4eb7b721bb06b4e367372d50df320af272d0

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-wal

Filesize
1021KB

MD5
7686ba3c5ac14c9d26dd42a549dd8c5f

SHA1
49055356804e9c3a0db88ec6f4b9993224fbacd4

SHA256
a136fb435ade06b57d0cf2654d1773bdaf52b2f389d8a8d717fc2491b4023ad8

SHA512
cb52001d841f83aed2dae6694b6bbb9e447d24efcffcf800e1e9dfa02fd33b2c109802f3f02301713dd20990ecfd2529368f5da849f5485225b17685b1c33fb7

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db

Filesize
4KB

MD5
f2e33d53c007e8bb1b45d44db900b4ca

SHA1
78213675dc962f7cbf93e254fa8b95a892f000db

SHA256
8b422557a4b2d23001c9e6ec178068b897c8310a23b89b76db0944642d5a0925

SHA512
7d796b39bf58d863588264fdab687f8a782ef74dbdb668c8d8f0a3ebb2199bc37c66dc6e44eca6eaf4fd1d6b6ffc51df4664ef00f6da32cc001ecec6e4eb348c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-journal

Filesize
512B

MD5
ae1c87139c67a0cb058c7ac6aed750c9

SHA1
a3ba05aa2966951b02108b563909cd6e7da20b1f

SHA256
edea8450d4a3d1925d2a5694d667c02d3381e8ef1dca1bc15be4bbfb4c113ccb

SHA512
ca85151813a156cb9911fcdda69fdb5e9e90570f09532f57fbbfbab80f20e54b6f1a897e5dab53083efd22b2211a52c872bb9f059f3d3be448e05d38e32704aa

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-wal

Filesize
402KB

MD5
d4e849c3080f30c0f52533cefd13ff10

SHA1
c6f141cfb7f14820e9558bbe84fe81d190c02231

SHA256
d582a1c24536ba59e019866d521b278617a0881b6425f7819831e90648bd9900

SHA512
db8eeb61181caff75611f50be30a55d3247b4bbc7c9abaae09e1c8da961ca6632ac42f91e941877bb12be68d1ab3b52cb0af0bd867b9ad70ad7babf2c8bc4f3e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db

Filesize
4KB

MD5
e636325c034011bcb86295c4ab28959a

SHA1
30c8de3e24e2362f09402abccba1ca7642377b59

SHA256
3698d4b28afc1b9577de47cd2e744a7b7f52d1ea8b79f7673de8bdddd7e4affe

SHA512
8d1616f06ca15609a6713a2b1d8d4fa2e9e9ed4b5869466e8f3a463e56446c5bc5d33174184af33bb52a3424ef98c48828e7a5e5caba078f1f84292bf6e1a7c6

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-journal

Filesize
512B

MD5
0e6678a238259b1d545f6e0a164df99f

SHA1
fa0d72deb06dc4de518675b5b6faefaf08b0f6b0

SHA256
6fd203fb36eead0e7569a5b518aec3de4768d36dc0f25449737e10eabe81e7c6

SHA512
8de1ae49ee95388eaaa5d777ec109bec9caef2aff5c3a7a662c91bad2c9721a365966a2f54f2b4d8175669285fd304dcc8c7bc4cb9de0ded54294f45463cdc86

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-wal

Filesize
36KB

MD5
e443a11a053772c1a3cd61bd3ae3578b

SHA1
bd04687c68998fb3759633c471822b7fbac1b917

SHA256
542a3279c096deec7df8ca2f33b526c179dabc1a5caa8b24d46e4fddc20d987c

SHA512
7612e4f7557a544bb9d7246fb6cc3c30bbb894539b56814fbd5f3faae5a043f5e48fcb29934ed8922a4734ff20dc827b1969d10d82701e98165333c3ce3d2862

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db

Filesize
4KB

MD5
b7133ddfc175ff62ad2069c63275b026

SHA1
89bddf0b6c75a5acee78d2c24b4d1a4d1b58c3c9

SHA256
31ac2c9260da8279e4de5cfa9fe0565d33f163b5b8e60d595353eedca00e6f94

SHA512
9b28452f95a1d1b7616d6e40ab086b154df5a6062938696c67d3ba4e03ec1773edffc0dec3f80e0d9efa465942f20e01d0754723c5dbae7d6546c7bdc98de562

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-journal

Filesize
512B

MD5
91361430e994817405218f617d661171

SHA1
d731672cd74d81613cf125aad850e38da74ede0e

SHA256
980997adb20653c9a0696f0d35a73583a67c63fef43b8738311e9fe3769a9f5a

SHA512
e004a24f42c037d8c5a137bd941dfa17c9e98dec45b6b8fa8be447075fcde9c6e5d488d0f8e7cb1bc7cb0117fa01e950b821e4e896393775ee3836ea4f5a8dbe

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-wal

Filesize
1.5MB

MD5
75b9405e49b9b2b72ecec23395e19533

SHA1
2059cfc45b9d81ebeda752c3c16d831fe8d67dcf

SHA256
decfb49891cd7886b31fd3710c2935fa898ae97be716409a02324af2a991bd9f

SHA512
24aa061271b47cb71d35a405e25446468a19c6940d83f5b1b5220c1f06216c01d47de814b1abea15514688be81780625bea239146c2a1584d56e75e3f2700be7

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db

Filesize
4KB

MD5
cb63a0333f7a8226b96b6aae57074b6f

SHA1
58235e3c3c8618d9d35c11f7a74b620f3466be68

SHA256
e75bcccfc32f57b934f80fca39113980a0f96f39836e0ee12a2c7f305eef6b9f

SHA512
91cf1a9be2e58db1c7cd5b0202230083d103c065f441295f350ded2d5e7b80d4dbd99c7e79ed67907e16aa251491a4765ed44cca0fe82c01eb31a82364998c6c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-journal

Filesize
512B

MD5
fd2c717100cacac6b4a6bad71e27faf7

SHA1
7ad60dc43fa8d08849566dd96503d36dcfebd634

SHA256
d197c4da326e119f3966094a6dd0b11320a36fad7f07bbf75b07534bc8d8c7a3

SHA512
0a065c40ee7f207c7555d72087c3be1946b3cb61149e9008cc7dffea6e9dcb881bc124ba169be6cd912e5f93f4cb721d039df7583723c6abe9266abc4c6de576

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-wal

Filesize
32KB

MD5
250f3acb13f4c9f2d6d063f96dcbd9cd

SHA1
8ee77131e5e0fc2983144e473a0d58adb0615dda

SHA256
196c67f6900cb39c8187b4333a3a567e889a2ff8be02465b755045679a8c3771

SHA512
e9be7a0f08a634bcdff423b7c258bb795b003197271641dcc3ccfb77cfd6b89499e81bdcfaa1a990d14c458f2aeacc1ebfc6dd1e683c80b699883da6ba66d27d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db

Filesize
4KB

MD5
dc794389e6eb9c64643b64eebcf70d70

SHA1
c89031fc55ce3831d5f440584fcf2f2ffc8c9fa5

SHA256
932093db155646e525e81c75977ca4925c5f12f305a413c5c3f691632dc5fbf1

SHA512
0b15e37fbbbdbe483d546454ffbd5ff9bc5670b1d3ae603fa647e3e1c138b418894af1f6adb1391f6ff74a1a4c72ddd6947f9b7b22c272f755c8f544721de4df

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-journal

Filesize
512B

MD5
b0c9687970060f501d4d17d1584ed813

SHA1
4dcbd924509a792e66fe8a89a807949e905c8e29

SHA256
030ec22e4c835788817e35f497c5a29ff853658e194ac3f6ac5ef50bd6766d33

SHA512
d0d9368626ce3565052149853bfac54dafcd67111720eee7240df304bbdd2c9aa415a8ad6abc754cd18472c43b158b365c115b5fc77d2cb878dbb4fab4952f6f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-wal

Filesize
1.0MB

MD5
a3b3a4c5a75073f203fd2ca48e3746a9

SHA1
48d196b1e995d61a1647c1504cfc77d640d19ec3

SHA256
38281f6b84d675d56cf6c41da88345b7ada0d50cdbcb800ae1b2fa6734886018

SHA512
53ff2a6759fb5c31fe2a6e64b7375fdef19665602794f12a478e77dc3d9cc27050903f5f9aba624d0f6c2d74d5f887e9ef7569a355172b0ed65bd23c42567c58

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads