badbazaar | 549d726fe2b775cfdd1304c2d689dfd779731336a3143225dc3c095440f69ed0

Resubmissions

29/05/2024, 07:44

240529-jk595sfd9x 10

20/05/2024, 06:02

240520-grv2msfc7v 10

27/10/2023, 07:30

231027-jb7fvaef28 10

Analysis

max time kernel
69s
max time network
336s
platform
android_x64
resource
android-33-x64-arm64-20240514-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system
submitted
20/05/2024, 06:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

signal.apk
Size

79.1MB
MD5

76351b5e3b9487b0b39759dbfea5f0c9
SHA1

19e5cf2e8eed73ee614b668bc1dbdda01e058c0c
SHA256

549d726fe2b775cfdd1304c2d689dfd779731336a3143225dc3c095440f69ed0
SHA512

0f858b36e47012737de9ca88399a4f95740f6ffc3639b5134aa418ccee441af905f1e503775fb741cd3def7931db18b517a8b2f07c4f0576f8f79ff9fb3f3fa7
SSDEEP

1572864:U/u4rrAgdZh87ZlyFLSnI8LcejgNtwQYpxtIwTJSzslunYuTAO:UOIeZBI8LHUUxlT4YlSjTb

Score

10^/10

badbazaar discovery evasion execution impact infostealer persistence spyware trojan

Malware Config

Signatures

BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
spyware infostealer trojan badbazaar

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4340	org.thoughtcrime.securesmsplus
/system_ext/framework/androidx.window.extensions.jar	4340	org.thoughtcrime.securesmsplus
/system_ext/framework/androidx.window.sidecar.jar	4340	org.thoughtcrime.securesmsplus
/system_ext/framework/androidx.window.sidecar.jar	4340	org.thoughtcrime.securesmsplus

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	org.thoughtcrime.securesmsplus

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.thoughtcrime.securesmsplus

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.thoughtcrime.securesmsplus

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	org.thoughtcrime.securesmsplus

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	org.thoughtcrime.securesmsplus

org.thoughtcrime.securesmsplus
1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Acquires the wake lock
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4340

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.thoughtcrime.securesmsplus/app_emoji/.version

Filesize
110B

MD5
e7ca620457bd191ea6528d40951c03de

SHA1
087e13f1579298c812e3ab92f088edfe1961fa94

SHA256
f35619e2f6564e915e883e9ad063179400bad11556a23542a6f0bdb2397cc371

SHA512
67d71d6bcf32a199f3b97bc60e0e1a61989cd9241043d53d5e8e1b18c00edb496844cb3391cc2db486e59d14434a09b1795d39ae6c003c4e464defbd84d7f80f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/.names

Filesize
169B

MD5
3ffb7f5db8d591d6b91fc7dfa6ca72a8

SHA1
92ed6f5a409c9ee9b2b914a6ab0903dc74eb684a

SHA256
b6b867b7e8780ac6ee80d899936aab481fba5634539db138b28b6a5370ea0833

SHA512
5f1124c03a72f49bb2a6fd54c14307f85975189762225b439cb0e61f732db511214fb60b7d8bfa3be092d1f11aa22d8ad63d2c46be85e687f5111c058718db7b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/.names

Filesize
235B

MD5
16be492701909187ee98c16a02420671

SHA1
c58b34c26fa5d71dfe08163f706daba3296994d2

SHA256
edb938bf4d0eeb35bfd006c0bc6b5fefd1a2d295c06337f6d14a770658227450

SHA512
f8fb874371fc498855fa152ac530f1b6337798c8bd8c9c8979fb2cc30a235465036d4970634df2a45d8efff17f42dfbeb4b6ed0cd82bef5421d29c2be701c0e9

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/.names

Filesize
301B

MD5
fcb4151c5ae06ebe1db600139efdf998

SHA1
721f432ec1c99710a3bcfbc7d377c70067943283

SHA256
579493e9db51e7fda9a28cb49538f2b8606488e9c5fff4e9c01522b4b6ba7ecd

SHA512
c47b6458135e4194485ba4ba520fcc410390ac5e6c4c864d9f9d46b64619a76f97f68ed6642a3df0994427e3cdc4933d3ca7ddf9ec119bd28999ca1a4fcedd19

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/.names

Filesize
367B

MD5
cc1a8efa8ad02378c3deabe5544cfc9a

SHA1
4ffa130a90939a6309c139ad89bb7e256d1bf0a9

SHA256
83b1682c961e3e558e203670f25b2dd7c1d3025b316b3b390575c067fbb2965c

SHA512
00810383c4c7da16c3b5a601172b1644d72ed0b1697bd08a9dbb5463fd75fdbb1f50e398bb88e59e58bba8e8008c3592b488ee35c8adec64eade8a8abc7627cb

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/.names

Filesize
433B

MD5
4a22cab418ac2f2e0f104521a6a2b48c

SHA1
0b4388b967d0f25b2311c07bd7063714a69ff0f6

SHA256
21183fe739622e3891a6bbec7de7b65b868098bfcc15eb09317a4db9e6329c13

SHA512
35d5db11a2f8114a2e161854a6af8ccdc73cd6bbd53fc147d2fc7d0f65f816a927a500c388a664592a9d17d066d638815cbac509b7c4372be1e3283e0efb8637

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/.names

Filesize
1KB

MD5
674601f73f77a2c61032d93e511d59b8

SHA1
8d59d9c8cae7f529024d7162b13032f64637b1fe

SHA256
0c50ff416e6e26e3c48868bed659ca70ec878a240119a6dea8932120d3d43edb

SHA512
90aec7facb1eb96f56e4071903628fea6e5a360d93009a70fec4f0aae0293a60386d4a6e3369f05c997b5c4c8c39396720cc9f27c44b280cc3aaad7b65dce96c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/05e99512-b241-4723-b217-eee01eb90115

Filesize
230KB

MD5
c61b6f59db04976fa5c47fcec2dea505

SHA1
5483daba474403496abe85c047ae328e24ae426f

SHA256
751bbd4cdcaafa628f312779157244754217f33e5b8c4290fb5538090619159c

SHA512
3410d87a78ba16e189f74678863e1d897164199e83909db0d3b10fbeb8bebc7243488e93b5ee1da7f02f61cbc998ca43f0397fae1470415b395ab1eff0c86682

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/0f9c40f6-a2c7-4526-a390-e5ad6b89264e

Filesize
195KB

MD5
79da3ddb0a98b8a49297d77554249bcf

SHA1
2e98becffcb15392900247bd2573f348c6c59df8

SHA256
c56432169318825a1938d2a6d6277a35170ec78646a3930cdeb5b1708026b8e2

SHA512
04a84a607917380638bb846317ef21fdb45e3f99471c02dfd5815ea1950b28f603677d09a0b825de76320e8245a410552c87bec165c9e69fab6bc43ad1532993

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/1a9ec81c-2ca1-47ae-8ea6-bafa92eb34a2

Filesize
155KB

MD5
d580899e106018e8b41a31f31d8dab3d

SHA1
97a2e2bb3fcd42c425cceb4b34ffaf6cc7c754dc

SHA256
956e96321d523fe695dd6a6bcddde4a30442734fd631b911443ec7f292af324e

SHA512
c5161903c8efa5235f5f6104d1d5cf91f375817a01a241470259a91a7a98ab530586248b89b64327fb18d88f37f63f28877b809c3b365e2351f09436aaa5bf85

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/3b5b79c4-9dab-466f-b2cf-03ee77f3d3e5

Filesize
310KB

MD5
53db693e4e77ea5e16bc9280d8bd3e81

SHA1
3c65f660f63b0e5c8309d3beeaa20f18af273322

SHA256
947894c5ffa7d6f9652d3fe78d2da8d66448d6db7dd137917af0417bfd4331f1

SHA512
a4eade87a20f0faeaa2075e96c4487c30ce7482a74336871c588a722507323e591d7910f390c8384049ac8152ce6633758eaf4ac3c5b7792e0393df872313a8a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/3bcca35f-4ace-44f2-8998-aa827e204e78

Filesize
170KB

MD5
3ee2943405760f87ca27dc8420694e1f

SHA1
40148d0f139f9400a3d968f1d26110ff19310120

SHA256
1cfa2269e6cba55b6d4fc9f8a89d7c97c4ce3d632ef73135f18635ca9e6d201c

SHA512
1a15220949cb9aae964a5112cfe02044323cd64747982ab5676b24f7b996890f5c8628cbecc60b36487e8cf79094e87422a05fb31c1cf34e55ec44a11aea7530

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/5dd2efbd-6951-49ff-bbd5-5232a402d1fb

Filesize
160KB

MD5
c6f1bbee1680951d5db5dff2d675ead1

SHA1
9056ea1e4b60f423316670e7d3ac14188ae97a84

SHA256
5b2311e72f274cfacee1337711db54161098cc4b228722eedcc184163754fe46

SHA512
2a3e5c76508b9a28c5f411483fc5868797bb52b09d5b62768559a8742958319afff2e57562361babcf6763d2c660a97d49836e65bb75da46158299943fe1c849

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/68454949-d586-4c64-8360-942639565506

Filesize
171KB

MD5
f4adcbfe902adb59462e55f7fa61eadf

SHA1
459c7b0c932dbe08e26eb267c2e364467a0ec331

SHA256
5969e486566e297fe7b9e463be79376f2493b4feb1c1844b8690fd6119c0971a

SHA512
8c68c078b58cd16982f5a020dc553b586468f7323cbbfb338dcf5a90247fde95553c5310fab8c5b43614358a970881a94f472b6c50dd8c6a0d95a1cd457649dc

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/72d8852f-26d2-4a4e-a82d-08410d2b944d

Filesize
117KB

MD5
a975ef09dd5769e7c620795decb934b1

SHA1
ea451cbca6a2c66e803b715e2da25eb0c6603383

SHA256
42277f04c7ee88f4ceb75e575afbe47175b9ed4a93d65fdf33123fecf1426b31

SHA512
f0630f499b22b51da603d341abd56d7eb22e9af8a0e84ea6f0c91e6f07d08d8b605952c2f3adaf95ea2efde8dbc40ca907877fc343dddb3ea168c5af2977eef9

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/856b3c57-5ee4-4e7b-a7ca-14adc7c69ac3

Filesize
308KB

MD5
288cdaa87db25a985f4608a906d3b81c

SHA1
bb093d424d27d0c008e244cba419a9ec1041827d

SHA256
eee86e31e8669f560b49a8f080750c3838c817db98064162d8dbd3f4f77b45b5

SHA512
cc145897364468ee917d85c32920a6bafcc73776fd571a287a9284bd7c77130f5b157f4997ed152be9ba308dc3ae7132e4a88384e96e516c9c4b6647736f9d64

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/8d7050be-9b6b-45f3-a91d-da304948232d

Filesize
285KB

MD5
5ce0c3d91b1f843d6443082c39cc7918

SHA1
bd6323ef8a7fb27989dede312a5b6c2748fa3c0c

SHA256
66642c1e20c463943c5f0425b4818c7e3c5f8e85f4f4a0528ba7d0281e99528c

SHA512
5d4efd5ce9e2f56cf43ec853b2950498f01184a76761ed9993baef8eb14d7118d8d6716a3f1046b07be5132f6a03430e3e8259538511b7e198da1a8ca946c96b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/8d8af426-fb10-4bd8-b9f3-c089e8e74381

Filesize
186KB

MD5
6752a1999672caa2e3c8d45060281795

SHA1
6eff489f1bd7bdb77e499a4244de35655d9b900a

SHA256
53a15adc0b8e1403a750e2acf7bbe388132aba327fc3c24e9a4a0db7c91c3d94

SHA512
22b3385ccbaafd238dfe3b79be6e0aba8515c78f5b6d30b92b3612323e55bd95d9d6d787d82b5b93d8beb38f2941b347c1045d53e7d85f7b8b2aa7883a3b1f94

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/9a8c81a9-d1b1-4c5b-a296-9f578c868a11

Filesize
98KB

MD5
0619ca0b64f7191c6e97e95e9a850189

SHA1
75ac49f3dd7b7892fd497ae850dbbe974f351af0

SHA256
35c7c9cfc7530031d4eeb2caeabea21f26fa3815c5eaae3e4155d4bd795cd07a

SHA512
5fff30a3cb16d1d662d287b185dd1983fba62a68815ce17f763f4bebc0cf240f59f6a83f5d724055f7faab04ba64082741783c5786f7722691ebe09f3487f84b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/a3b232df-8df3-4095-bf51-5f6f6a63b48d

Filesize
97KB

MD5
0c8fad25466dc6ee972c17689f747aab

SHA1
3dc9cb7b9795a3fe1f4593a5ff9355847a67c1f3

SHA256
fbd3b27a3e7ca4f8dd274208419ae75cc8d7acebe00bc0aaf3556eb4d501da5b

SHA512
8252a5764e17c30f1ebd87af8fda80c969edb77eed93bd567e151da83af063eab0a25ef3a7605e6c09fa09edb3905f146ef736d499e02d764083a71faa915dcd

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/a5069d08-6dd0-4eda-ae67-6f4822179d2a

Filesize
286KB

MD5
92f98e0c7ae119f4c9e4f25315b26470

SHA1
33cc113652b7932cf2c9759dd0a616533afb0a64

SHA256
5ab66b4ce0c9f122044774c9dd89e637a2b1b3464db4d3d473a35fb6dd8c746b

SHA512
198476c5d1df13080a8902f74df2b02e893c9ec342727fb8dcae0817416da807c168cb4a1962e53d5b7f80d3afdcd9234d69a7a8abd1b4ef30cad58f9ab6149f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/b2c7e197-44b2-4a7a-a160-d5ec4a2c20c6

Filesize
270KB

MD5
d8f09865c7103af97e2d28ecbcc435dd

SHA1
d7c3df557679a0cedc4a9f5ac98176c312113f32

SHA256
e55bcba73e46ad41d862faaf7f9998c3bb662db73bca03973f1ab3abd8c6fd63

SHA512
e708817646a2dbf19a0580867b2629a86b008737fab0d74793eb2d9aca1e10170d485e0b64e202791d3b6eaf47232d8e3633d9d0094244470d45d8993a656872

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/be7538f3-dee1-423a-a57d-d588806236b1

Filesize
395KB

MD5
1d181a9197e2ef30c577bf661b270bfb

SHA1
e750b8ab5341bd2e899184ad0f4f9ea1516e9779

SHA256
8bd524ed731ae3bf13262168b277c456e5cbd50fea791abf3f4eac1939cfc860

SHA512
7253cf1e7e21346c152586afdfce2e17725e4830abc9b2c19db397f58f3892e266a9e62ddec701bf225daebf4975b1f96002185313781fde9a96e6a215ce60ae

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/bfa64a90-94cb-4f31-87bd-b3e939beec15

Filesize
165KB

MD5
9a75105dc938204af84a588b3ada6d9c

SHA1
39ed7fac1b2aa2cd62bb3f4bbe194d50b48dcb03

SHA256
3b967df5511e80eaddc771e480aa72d52fffb8a7276c83b2f5387c70082f5854

SHA512
868c1ef3e2b7828b66a6108c440ad918a9734a4f422ffb721fb0bd48f4d54dfe812637a51209230b472300eab911b8414dcebaa5ed0ae8b13cc90e897d7533e2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/c637cb8e-f794-4edf-b034-22a6b1ffcda9

Filesize
295KB

MD5
de67132a8aa384850621de9cdcdc475d

SHA1
2c1be3602428a5affb073da2612b6e9cf48702d0

SHA256
1cf8a8ba91ef94d572a2bb5011335a7187bd95f6004060ae7183c942500b0dee

SHA512
76c0a1e281514d743d6ff3ee6af46f67e690077348deca7a2ca2f0c6adb4a510e6d0193a81b2d444e67cd6024583c854ad031e646eb5180cd0aae8b20e5c6d14

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/d4c4e77d-f295-4a79-9300-5f03dd219a30

Filesize
283KB

MD5
10bf8d36ed2ec6bb6e82cd4681461842

SHA1
29a09b19cadae09cbec21757b9d403b41ce193c8

SHA256
9ab7b36fa5ab48ee06f393e4f28a48baec4dddbc9a3ad76d9e3ecc47202796c5

SHA512
627565b2220097293f3fd04c883cb92d0ae1a7169aa5ecc2129869ed1f4b94c86cbc56a9d9f86914d94beb2a5ea3080cf91b2a2a8d9dfcc6f0086913d0702808

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/5db3d6da-82aa-4945-8565-dece7bf19a2c/ed0fc397-8e14-40b2-9260-2d483e2f1c69

Filesize
319KB

MD5
e070cd79a626c335029995ad5e3f6ba3

SHA1
1b0027fd8ed0d53a0842830fc93d713b45275dde

SHA256
408a9f0cbb56514c91fea40e5ce0e5b9cb2632c4caf4bf1b7174b63dbe11c086

SHA512
65d35f0971c928eb0d3a58818d5bda2bafe594bf2d265344dc0ded8f950df4783b05c26ec763133b717cc87dfd53ca127b9e32ee08d1a2d1ad9996bac67080c3

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/.version

Filesize
86B

MD5
2c259b622f2123110a7929bf4176db57

SHA1
f4fd7dc1764fb8094b41a38484bdb1bd484ca35d

SHA256
8c24e69e308985e32f296df3a58b6ecef217dad457462187f693fd8566e4345c

SHA512
857c48daded180ddb2062393e76ed5ef7e5a003996efbef9505ae7116ebeb90aac687957c110a4e308505081457674a070dbad057972df535a948e4f4225a6b3

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/fd9a0313-9e62-4c44-a4cf-03ab89f2e18f/.manifest

Filesize
498B

MD5
915ab99e3986db3e813e9680f9c9b5b1

SHA1
ad73a542f9dded6a1f6bc6760998985af1af6741

SHA256
40a762662f88d379030ab7059f10c4f14598194d86994f833e28956a2451480a

SHA512
af53208239fd188ae661ea8b1cdf3c9a7802b222d7908dca0734da78e32c9e7f4a536126d7098240cedbe4980edc552d0333c57640892e3753aa9040e9480cd3

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/fd9a0313-9e62-4c44-a4cf-03ab89f2e18f/.map

Filesize
99B

MD5
f1f10f62d99f8ff38d7ca2255200da5f

SHA1
bf5c8b3a03b6c79361b4d719ba61731a7a14a211

SHA256
5c6be4d17efa1726d7f306f6ca39f7c97ead2737a77312412d89f8bb3c11848f

SHA512
bc4927366de66c28ae49b34119a84d0f005d2bddf7eb32ed0796b33a3dc097aa7c9c18f71c0cab77fbdde3f60d76dcfaec0aa9cda885eb4e87a12b454f03c0c2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/fd9a0313-9e62-4c44-a4cf-03ab89f2e18f/.map

Filesize
156B

MD5
0d15645539b83ae9ca48197867622dcc

SHA1
628c54f8959d2f87f60b310dc2fec6b52362165b

SHA256
8737867f3cfe565d461ea8815fbb0193e47d04922897f59385d79c568ec21e4a

SHA512
67191acede3e64cb1a798ada881d851305fea3a580f89a73729d53c8c52290ace94b707cf13791c515bb9bcd47b395d2dfa8207f24b25052ede0f93e9667a2f1

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/fd9a0313-9e62-4c44-a4cf-03ab89f2e18f/.map

Filesize
220B

MD5
25b121c55c55e5af75ae3fe1f72c380f

SHA1
05704bea1bb617e35c1e1f1416345e3d22058e16

SHA256
7f994d188eae1be72006fc9ec70ec388edf79246be8218cfa314b701b98bbc62

SHA512
da77436403bc2d3988653f16813192be9aec092f14fdce4e87150ea269187ac3e6bac3e6642179b29f93762190ccf7aaa03eb2f2adba85c968a0a21eded09c44

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/fd9a0313-9e62-4c44-a4cf-03ab89f2e18f/.map

Filesize
220B

MD5
2ea7c4dc7330f1ac4c10e1dc1c479a04

SHA1
35e88cda20369b693d92e14d26c45bab2484ad96

SHA256
495f426bd813ebdb5007f2d0bee29c33ebc07d5412b68a9a91b22d846257c873

SHA512
e1f5ba882da07288824336cdfc26a78ae22ae6854c8834adf87dda29322829ee832e24a4343079d0a9e823dc54e361f513b9481b42f58992ef00c4c7a6d7cdc2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/fd9a0313-9e62-4c44-a4cf-03ab89f2e18f/.map

Filesize
288B

MD5
59a8ddc477477e8d7bdadcf7add41213

SHA1
c7c991897489c29f8fdf502adf42ed9862951f97

SHA256
e86da7d830ba5cf468fd9b392944b993540adc56ce8954daebfaa17c8758036d

SHA512
be0b756a4c9b6a454760ab4c068b20c3b6a7a98b646fd68b480564f0b86d9bdec75032d1333f4eb2c4c147b28262557d3654cd723b7e133db93b5b5845fa2435

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/fd9a0313-9e62-4c44-a4cf-03ab89f2e18f/3b615b6f-a00f-437b-8e16-4bdfdc1541b6

Filesize
56KB

MD5
ad4cd34327721459c11a67b4332c945e

SHA1
9c0742c0bb82288d984a37dd2642f1246e599d17

SHA256
305f941c2fab1d6ee97c5a4460f8653ff4ffec429701e2c9648befa1f593a345

SHA512
0e77745e3cf711c958e443b6b2b1a417dc88023ec1c668a0f7e1f7944c54abe78015a8a94197353ca486ade639352f3fc4e1edc215191b7e7f6fd9ca2f9fcf24

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/fd9a0313-9e62-4c44-a4cf-03ab89f2e18f/4da7fb20-7815-45c8-8680-8daa347ebd58

Filesize
95KB

MD5
44850ec0ba405c1c5620ff156b3d624e

SHA1
dda0533f8a46369c980550d9a9c4264d0c90b60a

SHA256
9b54b1da124f3c8175ca6f3eff36bf0476fb2d8b4cd5650f827e8e41d1854820

SHA512
a7703788ccbb585b5c5584582ba704764c97560f283269bdbfc6a3b7c7022d18c84037530c315c4d90250f6e40f6f2ef155ec9f83e27e57c6a5da23ca150c410

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/fd9a0313-9e62-4c44-a4cf-03ab89f2e18f/6f12a1b3-7d26-449d-a3d8-eaaf3e9f274c

Filesize
547KB

MD5
2367a2c4f94680d5aea44f06048fff3e

SHA1
41af68b7b2d4a3c1378a1eeb190e0fd8020f02d6

SHA256
aa2d31dea9ce8bd4801ab6a74f0e50707b04efd1ea49f8da58165020abde9c75

SHA512
0a2c11c6bf5a9c48f1a114ffbbede2279f3dbf11fc18b0bafabdeed6d4d9dcfc0e42140f8587edc5d17a17a57d3a805fea11251b7735f7bc569018d6c6a4d34b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/fd9a0313-9e62-4c44-a4cf-03ab89f2e18f/833503c3-f250-485c-9843-7995049157ff

Filesize
308KB

MD5
c6dacb6bcfcd747bba440bf2fbd2c85a

SHA1
ff2d9fdf17ab9adfd7cd41a75ef0495f11d27b56

SHA256
3c163d15b129e997225435c2ec3544afd57a1082ebb12f87a48600f9a1c74869

SHA512
6e7cb6de0e690bd8792d12959d1589020b1ae862d21ed927aa7f683898b9cecd2c8b813035b2bf3d99654cb70df391b16164d43f29e049e5666c6c931cda7d56

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/fd9a0313-9e62-4c44-a4cf-03ab89f2e18f/86ab4eb9-f22b-4d24-8257-24fdb7072d96

Filesize
307KB

MD5
1aa99aa25c72307cb7f16fae35e8c9d1

SHA1
17ec5016a5f2b2ea4f27f7bce1df4192d3590161

SHA256
a0b1f949528f7a3a2d2ff3b6df67c6c1b5cb8f62a2eba6eb5e06adff2d5795f3

SHA512
1a8f5535e76188c25bb2a4c046184dfbbf074c56a554083e12268c32bb11715ca6f70bb0007a1b5915a80759c4e11060f3f599d53a45c2e7d6b787da4244a578

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events

Filesize
40KB

MD5
571112758fefc013ca64f73bc959a009

SHA1
64b3e995d49a74c647cb467f54fc72c28c5af3bf

SHA256
632907b2357e6d3e99c86012795c6a2eebd1e8c1ee0a64c64878c5c1201413a2

SHA512
ce75b2bf73c4fd98b5391cf39610260fc90a91a7e85388c6074fe7b21f8b54eb88a0d0ce83a3403b496bcaf885deceab36daaae18976dc1f18fa4dd0605e2e34

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
2554abba504935791e4852b594ab2dab

SHA1
7db6b596226fac86c1bfd0b4d143c4358417e3ac

SHA256
9c709a20c1464876fa0434e9d1b23bc4c3336b13874038aef14c274b8b22eca0

SHA512
d061f2421f11959daeb463c547cd84eaedf0a5986a5a3aeb36486f2d3c9a25bf2c07bade240c69c5fa80159075a96795415e242f3a2bffb4952bdfd00b889dd4

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
67851e639cb5b272a65988a935d31ec2

SHA1
ca230b9c93a04cfd34b315a48c7ef757470367bf

SHA256
c1f0ce7df1845ee652449ac3358ffcc1605206d3521c42c4ac7a9c7689b38460

SHA512
93f89863e9d2324ead80b3a49f67cc6419d86d6e6d2574afc38eabaf18a10a43dc996592348924979a1f544d1b02442b7f898a9b8b36055d831004d5f85741ce

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
b2f8267a114ab4ab3908d59a52f2164a

SHA1
62a37ae170f1e923db07557d5ce91d3401335071

SHA256
0c5f3078398d0a863c0f44a1aca4bb73c408ca506c0e4ab6613f57dd282dbce2

SHA512
c346a1573f51d11a284bda7bd55a6affc322c0bf7292e82bf361f567d032c1bccdd098e1b81096ddc5ce96fb99e6291e9780a422ce5d8108a6a339efe1f0441a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db

Filesize
4KB

MD5
137419b83de9e534f9c591278fc0bdcf

SHA1
3484502d2ec0a1c928d912339c9c747172619a81

SHA256
fff399cc832f35ba30e2e18097220950bd3cabd8a94aa36ccf24fd5765640106

SHA512
424e15712d21e128b389b0727829b487b2af68db5381a0e113e3fcd91e2da9dcf682e1f991793d0d2525f084c3c91083421592335d22465a1a2ddd64d5e687cd

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-journal

Filesize
512B

MD5
853f4dcc2d45a6cf17ec2f01a1f906cb

SHA1
0dc0c3a3df0c2be233ea349c231eadf1aa027c4d

SHA256
673748eba9d378e493832a3f9e4e43db7fabc625ab86ae76dbd554073883bd9e

SHA512
4b504aa28674e82247c47690e2d624a85c180b2818cee0f70f9d429d870b2688caef9ed88879c21c4ea4007e136305c861729df3e68c570751be2cce242e8e8d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-wal

Filesize
744KB

MD5
6245df8f554b3d0adeaa0f454aaad37d

SHA1
78d75253bf79151cd3dae2bfc1cf3469fe5e7827

SHA256
0ef8494de27a8036f804e7b6d84854ec469171a0db4fc798f93b8435c9209af4

SHA512
18a4ad0f98787dea6bea9c5b77e6f784f4d13b33127ac963941238862ffd31f5a10bb15b1aed8dc11e027da879877c8930c5ec1fbde3109773c83d54f3a60609

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db

Filesize
4KB

MD5
1f2cda4116030f9faa98a50ad1f2da46

SHA1
0f05b7d48cc46fde107a8c8d6c39c1cf9a7c446d

SHA256
ca8383040a64d005cbbf41e32b31c2365d960424bcd6e7b556796c1737f21649

SHA512
233566e26a5cef97c9e09640a05785268d1ae9402ca902e3f3f2912f411fc7ff5e7b4174ddeaa9ebd292d025cddfb3dfb1d613d3edeea1ec71e71820f632a84c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-journal

Filesize
512B

MD5
822c4b21d1e00e6916be0c72a65b7f49

SHA1
5024bdd2ed9b3fcc549e860951389479f5d9d9a0

SHA256
ba115946b7072d59cd1bd653637e409e9c08da510605b7ada725159e07ced1d8

SHA512
96be2fe43ced0d8b76d4e47d63a958c31b1fca073bd59aa26ffa6c0c0775881226f545d6ec052623df0373dcc7cc1c795c1baa6418e80d9f0b2b73a390db45e9

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-wal

Filesize
402KB

MD5
7e33e81feb64fb957209458ef5dafcae

SHA1
5f4966412f657eaf441a608213d6fb01666cdf6f

SHA256
c60fc3e190f2dbe3bb49d6a51aaca7ebd30e09184cc3c533e25a584b9ea81dfd

SHA512
1e7d4183114b6df9cc25442196e589343620b30b4a6dcfc6bd7b3d18b39f52e0e4e1173d37908af335ace9fbb40c593a616b91de1ca828fbd38488606137fccd

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db

Filesize
4KB

MD5
ceb6d5bf97e30e18ac39d8a2fa0a3557

SHA1
e56db6a153ab14453e27458d5b0b0ad39b62f340

SHA256
bcf27c679b5b070d74bc2ded0d63caab587c0756d28ff99d17755d4c81f41855

SHA512
b628df71a02941dfac8ff4ba3252692410192d79d78a5e275db33e22042a65bfd9769a96388de5bce5b3e53cc019b45b20e35172a1371e91f8401f325a5eee3f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-journal

Filesize
512B

MD5
f1dcd880cc98cf5f2003223115fb0588

SHA1
bf4416efdf9d2ede43bff9fc0de2455467a52b90

SHA256
990daebf3d66ab66c7d377990e6277ab1c3d8f94138e5c786c6493ee7bc85c8e

SHA512
ca9570f03301602baa41f0f92a491ef55b74687fecdda0b6fabf85ab9b6ccc62ab3843e2739310febd51d507e665da1451961b12f382b46330dc351bdf749355

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-wal

Filesize
36KB

MD5
7907a3f51685d599bf74270ef421d6be

SHA1
d4fafeb8e6cfa705a176596ef90a95b2ba9cde74

SHA256
e5eb55d2eca539139f0b1210cdc599f3ca39a53bf7710101fe9d761b36f180c4

SHA512
7b55c72cb3e4a5bed3f4cb9c785e1e483bc501287cf0f3bcd3ec1c0b33f43b2f53ee4b39f1783d9ae80f6b6c6009a58e705a1cd31622aff0b9fe6a9ce90cf47f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db

Filesize
4KB

MD5
c2c29ce21890cc084a8308c0dd21a308

SHA1
ed3823a2b858a4d76fa521e565aa00b7417aef41

SHA256
a6e967e6beedc55bdac36a22be3677567671785a2e71b501d6d368fa5bf84b29

SHA512
626276ff484f982f4eac6ded58d86b4e1b5f88eabf233e3dd7fe81261a6dad726f0355094700d112bee309770bbbb371cc4711977a294343fa0ef05955411876

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-journal

Filesize
512B

MD5
0500e9ddf05a18bac9d95f8750b7377e

SHA1
e7a6d05124450ee296384812599d50adf0aa7c8d

SHA256
d7446a04122c15d268db8ec1c18400d72ae97571071f757a5d67c57f929d9375

SHA512
027f4b0c8eacc4c168320d51dd41e1684e7c35b56d823ddd09d0adb48c834e0fba5f57072ecc6cd0bd7b21d7ec39f426671a420772372d44791ce9657c9b133f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-wal

Filesize
1.1MB

MD5
973ab4d4ed258d022284496cdbde7287

SHA1
aad9c266de2fa4663f736b1d8efd8ccffe435352

SHA256
5df3e927c7d7075093b051b7434eb917aedccfe12bdaf5f4ce1214ec5ae08b7a

SHA512
5c8d718ebff3d060f59069f1acc20266f8578d086eba52fe8201de6cdf33708cf9aac067d3750075e38b4a21e8c25de928f9247c52f4289171e48d6983225ddc

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db

Filesize
4KB

MD5
9bca96e3eb38750a67fdc2614df02a5a

SHA1
0d69968af62cfc90de03fd7abba346ff37e92673

SHA256
4b244b132a5698b588b016f84e94c8d18265da36be123df4c95dcc7b21cf515d

SHA512
233a4f984fe154d4be61a29bf5903b760239614768401e5848a33af2f9fa077bdd53526e5e4f327cc15f3d657178bfba2ce8032917ea0b5788b5c57d43ce1b54

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-journal

Filesize
512B

MD5
dc21c05fbf5f21f21b35e07316040133

SHA1
99fdfe9eaa709b81d575865c57be80cef02e4832

SHA256
202cfd33e94d020c677b768170b365368bf10f78827ca9b8fd47a531063dcec1

SHA512
0853a85e7aeaec6d880acf2941d91900679b57b033339e4f3ff89063baf5efb69241eb4addb9fbffc19486df4c660c9fd542234c8f24cc7c8800788429be2e44

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-wal

Filesize
32KB

MD5
ce091bd210d0855152464ec8282b088e

SHA1
6f261e9b8292315ed7c8ae0c7fccdfde629b3142

SHA256
32df1b5c8174b8068dad8a26ff7416d859d35bcd308d79d404e7cab39b9cae28

SHA512
f17b390aef9a48d024c87e1d39ea54bef2e4771fd23c0f372dcf105427371074e8630dc45e91933c6611fbe46ca8e7c1a13b2a2b791d5602ea0507a8174a448d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db

Filesize
4KB

MD5
62a02442fc1622eeb2ecdb3d7b2f02ce

SHA1
7ebd6e6cf335bf629fbcc3b63fd7b9a772148668

SHA256
eb68a59a6eaf32d28fb38611aa0cfd055feeb7bd19e228521e031d8247d2d35b

SHA512
4a79b3300d10520a8bbc23cdcdc6ac00958673533e1a23942e40c5657b8f1a76e48a690ed06dd4c82e98d2dd48236d880f3655025a8e9691faaa1c2564b8ae16

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-journal

Filesize
512B

MD5
93f58d0b9f48e5c23ec61a4967c57e43

SHA1
da8af1f3edcd48bed049a0319ce1322222d2859e

SHA256
9880f9f1c3436e817e9a6585cff94a690de2ab130b7f035f3ffde2aa74ca3cf0

SHA512
2a3c8a0ea8d0ef3888fe5a592fbaa1ccb1ce9238df070788e2287684cdf39aaa1a24c97db4cd2ee23e65a7875410d48a039bd5ffd5d7fc8edc22af927f1a16fe

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-wal

Filesize
1.0MB

MD5
c9d68f393495be369e9847e4a4387681

SHA1
d8d2b6b0e2bbbf8e37402c5160c7c288e473d1ff

SHA256
f292d631ef6ec378459aa7f7c4fc3898e6892ebd66c1165d3030e02b265fff86

SHA512
5f21a104ba13fc47d6caeeb8bbc0adc443fd073aaa2853196a86a33c782c2f8803926fd65ea9cf4b3c9dc7af6ff703d6aff7fb8efa3d79beebd075ca334c4e8b

Download Submit
/system_ext/framework/androidx.window.extensions.jar

Filesize
123KB

MD5
3056e1bdb7d4e19789d0319eff484bd0

SHA1
6791ae47aa9466fe0bca27ad6643f846853bbee4

SHA256
8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0

SHA512
c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
25KB

MD5
29469324e59dfcc052f24b5af4e7b2c4

SHA1
10c1e17ac6f598037bb51baa07945663645de4eb

SHA256
9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a

SHA512
5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads