badbazaar | 549d726fe2b775cfdd1304c2d689dfd779731336a3143225dc3c095440f69ed0

Resubmissions

29/05/2024, 07:44

240529-jk595sfd9x 10

20/05/2024, 06:02

240520-grv2msfc7v 10

27/10/2023, 07:30

231027-jb7fvaef28 10

Analysis

max time kernel
67s
max time network
339s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
20/05/2024, 06:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

signal.apk
Size

79.1MB
MD5

76351b5e3b9487b0b39759dbfea5f0c9
SHA1

19e5cf2e8eed73ee614b668bc1dbdda01e058c0c
SHA256

549d726fe2b775cfdd1304c2d689dfd779731336a3143225dc3c095440f69ed0
SHA512

0f858b36e47012737de9ca88399a4f95740f6ffc3639b5134aa418ccee441af905f1e503775fb741cd3def7931db18b517a8b2f07c4f0576f8f79ff9fb3f3fa7
SSDEEP

1572864:U/u4rrAgdZh87ZlyFLSnI8LcejgNtwQYpxtIwTJSzslunYuTAO:UOIeZBI8LHUUxlT4YlSjTb

Score

10^/10

badbazaar discovery evasion execution impact infostealer persistence spyware trojan

Malware Config

Signatures

BadBazaar
BadBazaar is an Android spyware used by GREF APT group.
spyware infostealer trojan badbazaar

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	org.thoughtcrime.securesmsplus

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	org.thoughtcrime.securesmsplus

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	org.thoughtcrime.securesmsplus

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	org.thoughtcrime.securesmsplus

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	org.thoughtcrime.securesmsplus

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	org.thoughtcrime.securesmsplus

org.thoughtcrime.securesmsplus
1⤵
- Makes use of the framework's foreground persistence service
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4306

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/org.thoughtcrime.securesmsplus/app_emoji/.version

Filesize
110B

MD5
712777544c66073416bf786049367344

SHA1
5736ce898dca7779b44ae6baf7cf3ac92c4ee69c

SHA256
6c05e4eb4f0e8ebc9ffbb29db5095028eb39b17fd5fb41078ae69cecb61e7c1d

SHA512
5cd9854c395494fb1933174a7b2df47e4c67bd35868d8f0708e05020412388e8176d033befa86990b317001ad6a5ef106ae38f97c3b300c0d88c30f3a9503fc3

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/.names

Filesize
169B

MD5
a9f28fe4603a8b948e8dddf2cc1df6f8

SHA1
251c338a38b5b6d4c38d6cf0e7ae2cc006ade990

SHA256
db6ebe5f9d38b2450aa09549a1db1f9a66c39344983f4b118939b226f6556fe2

SHA512
9049b04c229dfda04f71e246881d382a5a0cf85d4de36a3544da3f4395b5838b1d66d8c3541ef64c807fdf638ae24e7741567df8b7d726ca5f806694bf95c863

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/.names

Filesize
235B

MD5
49f7636880f09471ed38222a1d8b990f

SHA1
80cee44789b61885cc755b86f2ec0cf3d3bb4fae

SHA256
db24aa032a4fe28e4991d6ab844dfa2f8de828317f0c048c30067bdc2d184048

SHA512
9f434a349aaefe523ba58d52e752b6a77f52ac384c7a84439e61c9504268e9fb8a33b134634b604e83d45fa24a0b073e19cb18e2f55fd494063de84f1a856eef

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/.names

Filesize
301B

MD5
8c0f6685ee396eb680aed9997492bd70

SHA1
44bd323cf6f7b9e62314830f133f598cdee43623

SHA256
ec3cdf217ede68b712d0a6c5e6bd54617117aa0c80105e909a5a4885d15075b4

SHA512
e6927619b58f384b6ebe31c1e0ec78488ef24f47decb7eb7f164dde10ca002c876a280a6958438487375d0ac8494df27a1de92c61e14314459ad0a1b0150ca82

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/.names

Filesize
367B

MD5
977f92ab0e8f693b261d1ff3518e4ee3

SHA1
dc212a6d847cb68820c8af0fdb756c100b8389a0

SHA256
116f74c0651c9090088688b67cdade791e019e29a46ecebf4657624e003e8031

SHA512
809a7eb687e09c70f99fc7f88d8c860b2953e89776e097398cdeecd915cad302e5f903141e661a18c647cf99be2b108076fb38fd16ec64d909006f2ef94723aa

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/.names

Filesize
433B

MD5
3369d72d6680bde8e384ad26abe7fcf5

SHA1
e3b830dbcf7582456486abc98df24ef9dde4aa79

SHA256
1d33432f5a9f171ff4aa7a48fca6b6ae4f96dab4abdd1dd4f9e38812b09761f3

SHA512
429c5ab86882500874dffacf438398d35e263de21d0bfd42486bd3df6c4c70da2d91e872811da9a5fcaad6a7a2d7ce2660735a1ae9791297b55e63e7b946154b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/.names

Filesize
1KB

MD5
93438c0ed994aab7a9cd1a20c7cec806

SHA1
a839480b1c5cde93eb62fe192d074cdbf8f37254

SHA256
337cde28165ee3283173cb275aaacd100f9387c958c1586be5e3ab2e9557798d

SHA512
8677f51262b7a0f442875fcc8ae02e12fa3b93ba836576701603ad6d77eaa707053c0fdd0c098d9f9bb0a0f91a4e6ad729fcbc8eb06038b064979dca2c57085f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/01fd5973-ccfd-405a-9f34-41cb1f2fcd13

Filesize
295KB

MD5
20ad951f4a4557c93f4c7a1b16e39fe8

SHA1
3d63e21a4dbd839cb689b02996e2567abce54ab7

SHA256
1bf92b669eb93fdc04d9ef6fc6fca53739a81e72bb89fd2dbcffd13e74b52254

SHA512
3c965d5549d23d4bdd01c1fa7195a1cb4697b02165bc20c99abb3c042838726784ef7d262d879f65302819d83ff8326cb61ac2a9f73dde1637c7a615a9fb5e23

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/0956cd2a-5895-4385-83c9-f91e73bc9028

Filesize
285KB

MD5
025ea89eb8072c20960caeaaa4593eeb

SHA1
eede9ae9759c8c52ff7b423cb215398b734a686a

SHA256
84f42dc7c6cce5c0743d5850ca0914cd5807f921dc274e040943aed0ee5ae2a7

SHA512
943bd179d20e7cbe85490875075f663b080bc7a8af8a7029fdcfea548c107f9f1da95470b50d334456587cb7182f5da76c736993f5c6962dca2c4aef966c5706

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/1b817c80-3e83-4a87-a3aa-383c6c3ccf71

Filesize
155KB

MD5
5af7ffdfce74da6acf0bc2021687c3dc

SHA1
4a8feabe990b02ec0b783cacfd01cfab42508d4a

SHA256
3527dac6ac01f06d79e2d00a4878c3e5643fa50bb6fe2438216e6e1e82e58d15

SHA512
f132ea09b48d38c6daef18758cc625dad2b6a8af5dbd689c384142095383cc573d409cae561b7e9bf8bb9f451b4f994d45107bd18f77e7411667f3a40b6e728d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/1c179dd6-6e62-4552-a07a-f0b3bd1242c8

Filesize
97KB

MD5
6bd3ffb2cc2c3a349418e05c3cf9a82b

SHA1
3d624f6d1cfd5ec34216744831da8f3deac5de24

SHA256
61aae44f11e9a5d8c485468e18ec8a44448628ba728c3528699c93ff43792f76

SHA512
b1e9b493bf45a60d8fca2a295452a715932866c1abe41ec36f8602d508ece7ba70d0b648294a1ff156424488690f35a39384c608265a197a7e64579cac0ea123

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/2309e873-6fab-44ed-a917-9b7cc521c189

Filesize
319KB

MD5
12d81dfe28fba2ef0946da48f3f77639

SHA1
ed06a7a56e5be633370af23f41a606c9e7cec2bd

SHA256
9a64e30c201db856568cbfc4e5c888771b5758915929f0d59b254db34a75c8e2

SHA512
920a6d363e24c1b06ed14971eab3f7b8cf30b27574a1d5aeca7183d30dc8ed34f7c95126beb6c791d42cb03df673df94fbaf784112bbbfb8e325743690808adb

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/2716612b-01c0-4d15-aeab-8549d597a90f

Filesize
283KB

MD5
5fb90d71e7cdcbfd3d1faae7a04ecfe0

SHA1
9116d0718dbd6a96043b4f6a823703ef1ee3003a

SHA256
765ddf6290a851541fb53aaf69be53c8d6766b1f3493089fe147def8ad95b5fb

SHA512
c975cb6d027f6814b82eee575dbb26956a4d4c565fe50ebcade34c5ec1d0bc25d624b9b0ce46c740ecd911a208450a891797e71a1bbe02be957bb84eb0bf6f7b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/3fc6be66-ed8a-4569-9d7c-ddad718b4255

Filesize
171KB

MD5
2edae9d5a55d81a9d8f538a597d65bd2

SHA1
e150cf279e6ce391ad7f72b6ab5e11b160e82223

SHA256
420c0c16027e176890ab8f0634d4d74b259a864b031937aa5ccd313cb8a604fb

SHA512
4462f55943b8c36171855a95bf1284f95928bad5aae52c49025b178d93daeeda14bcc406f4fffd02b1b06fca8d804d82620570c6ce1c10c7d409e7e9661f6ee7

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/4151407b-170f-4c02-b7b8-34b4b0c8be96

Filesize
117KB

MD5
22edcddbba2dab96d2d98e5e158610af

SHA1
fdf7a5ffe22226b173d1f91fbd3a75f5eb020b60

SHA256
cd4ac416eb31f621175d792b44a48732a0a2080747434a9e9ad2b4be78981350

SHA512
d58de2e730314f75ee7bb7d7128c691fb3ed059463ad22774d86b9f6834375f8ae96c33669eaab9a0661a64a0bdac1c7acf7816157760e52208b6690199b6c92

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/45d207e7-9b5b-4ff1-972f-6e82af7fe2f8

Filesize
160KB

MD5
2be9d70953cbafcd8c406f511bcdcdad

SHA1
d2e03c543d61263ccc03980425a96c691f02577f

SHA256
4aec45ef3e64d9d6a6846635b442eacb51dbe226c174e545696d0125f0d615b4

SHA512
abf2de56b795a211fa6209852c938f0d34929705cd3fcc14d7334fe70633e9138ca421bdbbf6b111acf50931a1a49e36bdfd44c77e4e2167ec7b564835ed57c5

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/460cd8b5-6ee3-4c9a-b8e0-db67f682799b

Filesize
195KB

MD5
07c4edc79d6fd364a3dbc499a6108d63

SHA1
70cbe9a195eaccaab2bd1a4d42e2b7466bd03092

SHA256
2191bd206429b522cce45d6535afe84f8353ca8d3521934e09745beaa2ab07ca

SHA512
768c6237a6f13750141e34f9407fc85701ab9b8f366fe7151877a38502f7c075a06a473ef96556bb087d6c0e7baf511451253c9d28e3034e3b0e4c11a87fc589

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/46581022-016c-4626-bc9c-90de769f8594

Filesize
186KB

MD5
9b3bc7ba1c05e048fe25d5aec265be16

SHA1
eaecdf65f2691644053e2051e6f53e0219cbc4b3

SHA256
b8cb9cf6962cb155ac439ebcba532525056478d6926f8c2b6a72dbed1a173a21

SHA512
9429b98cbea0ac2dc08157bf9626448ef401c6347bb0fea35239c64b6b11f397191a0971010c0bf99a9aadb61f5c082bdde000a2fa56424f8485399e17ba4229

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/52f984f3-bd59-4d45-bcdd-3c2d1c6ff01b

Filesize
395KB

MD5
6f3320780cd3325bddafdd071efc5f08

SHA1
5d94fc0ef567553896d649cd5aa3c0e21ebb38e4

SHA256
87809c21cb858ec2091b9b712b87779b42b376cf62966269d47ab43c9332017d

SHA512
417be83474d0a5af708e6a46773ad5502c49a67a1b8a53d74bd9d0d6522d26b1924ce9b2999341b262bd01a4d22386ad94e09d17da56004aef6ec77cb9a2c12d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/7062ddbe-981b-449f-a332-37337ab1a168

Filesize
98KB

MD5
245372422ace1a616b940168c1f9787e

SHA1
cca16a34e1588c0c8716861a11b4665dedbf2392

SHA256
79a9fafe5fd31eb1b6e4f8844968ae4a23b7c14ac3c3f6e7fb9c0a6f15182d6f

SHA512
042b78a46fce89bd51bd4cd155d12e7df31cc6788d9c102c2240cf8d0b9b0a614b21066f93f4012df7d62a92316537a597f335afabf2a7df44a3a49add9510aa

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/7679bb4e-1cbb-469d-9488-ad7afc0af4ce

Filesize
165KB

MD5
605bcff96b8bdfbabcbc72ef6e4f11f5

SHA1
8d599b23bfd38f23d599175fbc45b8d36581c73a

SHA256
ff15ee1508aee6516da040e87f2c0c82c803566e4e4648fce51ca0e0e4dba910

SHA512
b3fde1ada5c85dd70efba586615a82bd7e0b6c9fa50c9361afb75c91ac37a44c826aa82859757eea81f67cd3805c444466a2c9c3c3b8bcb4bb6b547073ceab9b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/a27aaabe-d9ab-42ee-b314-9d1df0d46e09

Filesize
310KB

MD5
b88646325a8d5291f2c3cc5041bfc35c

SHA1
87c2707786201d4c69c6589a4e2b59e9ea59339e

SHA256
02ec8ec2a3489a95471f22a177ebc1bd434d5d417804666bb0b7d9ffd3e672de

SHA512
0c09fadfb5fbc4d00f285771ab44edb0b429a46b80ce5e840be2be19f2f54583c18234e32f789d769889099bce790a3119eb56997819e70ee7e4fb379738e11c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/be43bcbe-855a-4d88-8f6e-cbe1b7147139

Filesize
286KB

MD5
36ca7197cb9e899d7124e98a3fe80903

SHA1
41b77f3e3e92682dc85f04f5cd244e2e9137c83b

SHA256
f1eb4bcc3ec6744e430e088f21c44222142e851072cd7d25f3cbc2462199f0f8

SHA512
5d582e89f0fea4503e863d1d5914e519a79477b0a2fd71fcd65c431a4e2987f2c90e5ddc6e60ff5831c9445f6f38a54e7ebf1130466c2ab3ca453b654f9b6ae4

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/be6659d6-340c-41d9-a4c7-ac6c277a2be6

Filesize
308KB

MD5
078e25aa402c61748202bb0b35a97729

SHA1
7f889b77ec92494103979ea314cd02bd61320916

SHA256
287d73a5a9a20919b08d7d95804ab40fa920df04983d98537f9e25ac75d973ea

SHA512
f61d2b70ba2283d6beb48fb7245a9222e08675117e652ca50879ded65a355ad59f0a095f008651acd44e4366be20bbb690045191daff90b5b7250382d0a88674

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/c45149bf-b680-482a-a8bc-f2008b54703a

Filesize
270KB

MD5
d8ca2f58d051105f22bff9deec062a2d

SHA1
1c65b541864f3d7602520060c36c2088586c4995

SHA256
9557a0557bee6df5a4e4be675572a9cbd933181f03d1a96116f9d4b16e5456f6

SHA512
af34d27dc01382377f409d542cbd022f1b2f7108a61d3195b2fdff3bff381b4cb9c84801f82dbf9307309ea79b07188965f681b71e4c2d61bb0a5519381b0ac4

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/de05caaf-fa21-4659-93a3-cbe39112fd7f

Filesize
170KB

MD5
cb7ce6faf6010d0ffb46a25047bd8e5e

SHA1
4600923c4b5678f9c3643505949049d09c936ee0

SHA256
95b59c1e384dd1520c9b9dfe7d42224844cd9df61c8f49b78a7118ab8e87b63e

SHA512
70f56ca4529cd74aab542597ce3b6dde95d013edd247f1225e5562a274f43a4ac16f2894a5c1a460de414208a4c64a50e433348889cbcd2e611572d87be7f20b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_emoji/966c1479-731e-4e58-a845-70a0f4623f9e/fc89fec2-4c1c-4c19-9b97-72dd6cf9e613

Filesize
230KB

MD5
f5c831deaaf21cab9e1734982d49aa29

SHA1
0341f20c41d8af4adee09005f9658dc44af8d7bc

SHA256
2590baf12671229fda1c82b60dab2399c0d7fc4fea6f5c427c989515c9ce7f07

SHA512
e98567a58a5128bea5fdf92509086c542158fd9c6b5a6938eab6a31bfe1e7432670cf8f7b0f5402f20c7042c5bfb9c5846b3c8d7cbc354c64506d6ad16d13026

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/.version

Filesize
86B

MD5
cc81019c602ba330d8349573785accd2

SHA1
3797ceacc6e2cae514ca96bc0f35433b38991a59

SHA256
ebbee0c2cc5f7fac9c8604588ee7fbea3affb4a4a6f413f871de68275ee3d051

SHA512
051c6bb47331b73505004432748c574d3a93289aa58a6d8da47e800d3aee133d7473b57c0a671bc3773ddfd916f5b275790354a7580e297e7d50a674811fab2a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/27b80ed9-3ec6-4cf0-8dd2-bb5e2decc5b5/.manifest

Filesize
498B

MD5
6429f54752a5eedfd485eb6290c240f3

SHA1
2081379dc93302dfd3008bbc48c989527ebc9fc5

SHA256
4da27a09e08aec873f2ed3fde45acdd498b40cf2ca4e629bda77cfc566414017

SHA512
aa410668bdf4208e0f953a88842981d86360eb264b2bf44e3e71ef0adeab7c475bd1e44e2d49955a0e8b04b89df2951e037663ebaad5652303fca264568ef5d2

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/27b80ed9-3ec6-4cf0-8dd2-bb5e2decc5b5/.map

Filesize
99B

MD5
970827118a59a229a1e371b0d2609993

SHA1
648986c7c521b949791fa619fb2c10fd34b46d5c

SHA256
a489ffa9e1d3516b1934a1975161f19edabf38bf203857ea9e60f093ca869a82

SHA512
ec5bba1601e9414fd2a37b50be616eaae3af71eef38bbbd5bbf342e47b1cdef7fbd04325e42b1ed0aaa8c2da869eca315a5bbc648674689b7b3ca63242c4ec6a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/27b80ed9-3ec6-4cf0-8dd2-bb5e2decc5b5/.map

Filesize
163B

MD5
d3a3b312a5790e565ccf8af92c3b5a9a

SHA1
dc2db13ce7e6ae78756dc313ed35ed1916bdcfb8

SHA256
dc4038fe8fe909520e40d90d1ab6990f5a33c9bbb01c9566d4d03a897dc6aef9

SHA512
7da98d072f1a19d477a8db056d919ef40f085f159c77485559c0be92d1e3f16aa3001a0d286ed41fdfcd24cee7f2bb65d19abde92cbb5698090f357a6e2684a9

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/27b80ed9-3ec6-4cf0-8dd2-bb5e2decc5b5/.map

Filesize
156B

MD5
30ce160b2eb06e6358ad13dc90e54990

SHA1
de53bfdccabb7eed88bff318efad407ca38cdda8

SHA256
863ca489a5a7fe22f05b7f36a81213bf3be788857a1d39a016beafea59e13d07

SHA512
eef8161bb1337b4033a8d0bb57c5fcbcb2264873d35cfd45aaf29e6fdb2476edcfdf5315d742fddbc3446111237014c5462d4d9601efef0f13f1eb6ea9a9fdda

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/27b80ed9-3ec6-4cf0-8dd2-bb5e2decc5b5/.map

Filesize
220B

MD5
df9dd6e9c6e95e89d3e880829782b4e1

SHA1
95bf887124d5fbedd4cd05ba3e52cec547f2770e

SHA256
c91118961529eba75ea244ea1fcab7ab992fa7cb868499d810ee47b7c66f9e85

SHA512
52321e7a269597634d6755fe8b6799aac014adde8a3e6da9f53f7fa4e9a03e2445edc11a1934f9c952ac79a0e68428344c895dc927749437151362fbb9e5ef88

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/27b80ed9-3ec6-4cf0-8dd2-bb5e2decc5b5/.map

Filesize
288B

MD5
5775d06548d6c30b573e1bb952f359af

SHA1
efb47c86e61d8506f3cf5bc87d65fcfd48f841e4

SHA256
bbdf545f390c919c722a069fe75d2297542df15307622e7398e95e7e764fb322

SHA512
f8e9db90744477770a2118c852348e8dcc0571ec4d291d8a64a7fc965fc98635d12b1dbd36ce7c5203e6e9ef9bc55746c304c76426a0c28189d48f10298fa99b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/27b80ed9-3ec6-4cf0-8dd2-bb5e2decc5b5/57530ce4-42f3-4e3a-83ee-f0ebb8d81097

Filesize
56KB

MD5
ad4cd34327721459c11a67b4332c945e

SHA1
9c0742c0bb82288d984a37dd2642f1246e599d17

SHA256
305f941c2fab1d6ee97c5a4460f8653ff4ffec429701e2c9648befa1f593a345

SHA512
0e77745e3cf711c958e443b6b2b1a417dc88023ec1c668a0f7e1f7944c54abe78015a8a94197353ca486ade639352f3fc4e1edc215191b7e7f6fd9ca2f9fcf24

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/27b80ed9-3ec6-4cf0-8dd2-bb5e2decc5b5/784c7935-8d79-4cd4-b9b2-907a60a40cdf

Filesize
547KB

MD5
2367a2c4f94680d5aea44f06048fff3e

SHA1
41af68b7b2d4a3c1378a1eeb190e0fd8020f02d6

SHA256
aa2d31dea9ce8bd4801ab6a74f0e50707b04efd1ea49f8da58165020abde9c75

SHA512
0a2c11c6bf5a9c48f1a114ffbbede2279f3dbf11fc18b0bafabdeed6d4d9dcfc0e42140f8587edc5d17a17a57d3a805fea11251b7735f7bc569018d6c6a4d34b

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/27b80ed9-3ec6-4cf0-8dd2-bb5e2decc5b5/9774fb2f-426a-4d93-aa43-c4d0de2a6b87

Filesize
307KB

MD5
1aa99aa25c72307cb7f16fae35e8c9d1

SHA1
17ec5016a5f2b2ea4f27f7bce1df4192d3590161

SHA256
a0b1f949528f7a3a2d2ff3b6df67c6c1b5cb8f62a2eba6eb5e06adff2d5795f3

SHA512
1a8f5535e76188c25bb2a4c046184dfbbf074c56a554083e12268c32bb11715ca6f70bb0007a1b5915a80759c4e11060f3f599d53a45c2e7d6b787da4244a578

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/27b80ed9-3ec6-4cf0-8dd2-bb5e2decc5b5/ecf8fa9c-20b4-4ca3-98ef-51a626c24eb9

Filesize
308KB

MD5
c6dacb6bcfcd747bba440bf2fbd2c85a

SHA1
ff2d9fdf17ab9adfd7cd41a75ef0495f11d27b56

SHA256
3c163d15b129e997225435c2ec3544afd57a1082ebb12f87a48600f9a1c74869

SHA512
6e7cb6de0e690bd8792d12959d1589020b1ae862d21ed927aa7f683898b9cecd2c8b813035b2bf3d99654cb70df391b16164d43f29e049e5666c6c931cda7d56

Download Submit
/data/data/org.thoughtcrime.securesmsplus/app_story-fonts/27b80ed9-3ec6-4cf0-8dd2-bb5e2decc5b5/f812e1e5-c55e-48cd-94ff-b0af322ca933

Filesize
95KB

MD5
44850ec0ba405c1c5620ff156b3d624e

SHA1
dda0533f8a46369c980550d9a9c4264d0c90b60a

SHA256
9b54b1da124f3c8175ca6f3eff36bf0476fb2d8b4cd5650f827e8e41d1854820

SHA512
a7703788ccbb585b5c5584582ba704764c97560f283269bdbfc6a3b7c7022d18c84037530c315c4d90250f6e40f6f2ef155ec9f83e27e57c6a5da23ca150c410

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
c7672fe85b9ba689d240e728cd7bf342

SHA1
d5772e923caf88509f96331f81e5538aea4c8a4f

SHA256
442018434a7f19e4f6b9dc27ae79e70c209d27526c03069a3118e3671ddc8652

SHA512
0e9c915fe03323be35d7ed1e24905c91dfdf964b516103e8bd9247f0e7f84f0ce3ec7f91c641877ae871c2b15546908f8f88975354ad6a87f8c08dc9587bf654

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/com.google.android.datatransport.events-wal

Filesize
52KB

MD5
03692a5b7ad00123748500759395e774

SHA1
8bf62938e44fbf8103fd230f4a42d0049893dad6

SHA256
ae6e21a8a28a62eb799f78ccdfa5edd44ea42307d9a1d7bff27cf80da2251dc6

SHA512
82096378ce9e8d4bebd8cad8dc979757f29db7c5ce6a3a7bc27dd4d1a8cb51b2d3052f98e707646e57fe31a1e2fdd034b213c27be7205bdfbe7ab1fc96c7e50a

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db

Filesize
4KB

MD5
4c05d67229771d08c03ac61ddf8af4cd

SHA1
fa8c1cfa39030c559cd61dba7258db3bddd301db

SHA256
534b206df09c35e1947b6cc9fc43372f6edf3eb9ef87c9859b7bd5d9ae564ca5

SHA512
4b267c976e967bb38025bd097e8b90d3d275e4cb4ece0dd27d7b5324dd57476648614a66d19e16aee3f423924b9344fe5a2d99f5004b54ff1fb754a1d0237e64

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-journal

Filesize
512B

MD5
f4badd32b1b0a86726a7bae2fd9b83fa

SHA1
2e89d6c10543513ae2a0ffd078fd3d49927a92c6

SHA256
f48e76b09cf7af984b2a94dafdcbc45e2816aa72b5e5322e9d33dbe1cd67694e

SHA512
37c264556f202ec7b90ca97a7f57adaf10475eeaa248b45258c5a61bc15e8fd4fbba82d8085039e6b093f76733152bbfd7ef1221392c91a73648e8671266bf54

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-jobmanager.db-wal

Filesize
752KB

MD5
89769fdb5bdd121e0af5711843be6870

SHA1
0446ef332222c2fe1cfdc57abdf865cbe6a1fdd5

SHA256
d4e1bc4a888871d367f6292d407c5932f6b1a9645e44ed5f9e2eab61b1ac10c0

SHA512
e78fced646d30d1671b391f16f966125f95a8c376944f62b998cd58425f4ff26b8de8d24ae145a7ea481cef2683d448a2c5d1b1b3bc82a41ad3daa00ba4310fd

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db

Filesize
4KB

MD5
39c0faf635fb0b554a3564ba3ad7fe5e

SHA1
1a2c30167728f7ffff58aee6d6e74b16d126a829

SHA256
9848091171f4b36a366e23451dfad0c9acd9dd3020af344e5b653e0bb8085954

SHA512
79ae3f02dfb7e5dda8960730a3003398129deea0a27dc681932381397bd41c6458dea182cae18c43a5178216861ee4e98d061f8d3bc0cfa423b3556ac75efe9c

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-journal

Filesize
512B

MD5
7740fdd8ed5be28bb1d5c4f41a661a7e

SHA1
439e0514d1be0303ab88cddaee672daacc7bbe7f

SHA256
312dc1f73aad83aef7bbd0155a77861c9d0f2ceaa13b751162fc1092edea1258

SHA512
d076f782a112ef6964488b3640d1ffc9d69523b3d16869c129ae9735a1ff80b18dee4302f4c730bf6045491947744ffd4391180b7d7a7333e2a056a0dcd56e7f

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-key-value.db-wal

Filesize
402KB

MD5
5b54fca489ddc4b3792c538bc9e6dc94

SHA1
09d625c0950e195da1c042b0c0c1e234b82d88eb

SHA256
3cf89582d0d3ecee2bf4943e1d6035bac09ea8a5f375ae1d77e0c34f249873b1

SHA512
692b5d214027dd0ff1ad37c6e49e1e3f1b0c092238f32ec50cef5530ca6f0eae696e9cff57bce20b43114bbf17fe9dbe185a71d070e9fa0af11177f95780245e

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db

Filesize
4KB

MD5
419ec87e595404b7b71e1616a8d73958

SHA1
2f22cfede412ccfe521a8dd9606dbbf7347f505a

SHA256
5962cba4295c0067f600f53ccf80c837e7b72b48a08934a88333c78b10da278e

SHA512
1b97ed2ec8ea309b308c451a13acc7a156937ff27d6a0f145c5b71b77264e2130d7e5000237287b80d3e354035c45a1d3d99da56f3c754356b1ab3114f2c8d76

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-journal

Filesize
512B

MD5
5705c2be9dd7da7a27f1be6185e69de8

SHA1
ee52dd595efac83ee56c8f0a99d2c623195becae

SHA256
ae4ad97a52e77af2b155b41312cc94a54106696e8cac51ab763587a56145bf5c

SHA512
a6a0f9011117bb78f172d083b26fbd0355e19221e264159967140913b41505f1ded8c43defeeafaa672164d470d360f9ee0b28596abb86d9ae15178e8c211fb5

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-local-metrics.db-wal

Filesize
36KB

MD5
38cc880847cf81ffc5b829c4bc40c7ca

SHA1
aed1d7b65037e059109c1795efb9fd3b2478d0c1

SHA256
2b980e25c86143cf4f8f6e1699878445787af2b49325e23a58734be9b9d5de26

SHA512
b33c7447fb7c08ce22d0c9664a04bbb973f78c1b1aba452b2633e818fbef5a0f451ac50b160aa9c4fdcd6e7067911836892fc2a1517baf7fedfe608cf707c6c6

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db

Filesize
4KB

MD5
e6dd9fc4bea227d3e9c6148599a924e6

SHA1
c240bf9a214cf9ca700a9ccde792d08245a6b2ec

SHA256
e6070a6f729f1ac4e26a7c7f17744434fd34c729d13738824e83a41b37b0b410

SHA512
31eedc40a2edb83e369e20a33da2dfdfefbcbee5b1af1c225233952e84fbc58056f71c7ed41e23e6488b159e00cabcf9b4c506cdad0276c265078a1229ea48b4

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-journal

Filesize
512B

MD5
8c35422cfe316b2b943fec9e392c6982

SHA1
0769fe21ea2c7293f1734a5207ab2136e5cc3fbc

SHA256
9f716d13501f92735b7dd2423ea82288e3b2be288acbb8acee2fc612dd480de6

SHA512
6f60ad563a944180c2f025061e2fb18f96b0c9d83f892f8226d08f9d8ae3dff19efe1e6f949ec271e5164673c2f39447f35fa59d2a7f02e6e62b7a8624349517

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-logs.db-wal

Filesize
1.6MB

MD5
5a45c745399347e59ec0d19abd9d7276

SHA1
2cb7f3e50a85fe325f21883b0e911e7b7cee3f7c

SHA256
7e3918bb513dd1d2a060c3e23ad3d6ede47dfe8996c72d112b23f02b06ee591d

SHA512
c17791ca27ada713d4a7642fdd62977eec54e3946648b370555c15c0794cd537267ea88bc359052290b894ef55fd944626f0878cd02a8d4e024767bab57782c0

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db

Filesize
4KB

MD5
bfa5e662e2bac5a7d9acfa96be37298e

SHA1
5d614b4f96cec9a001f78736a54f4a778fbd9679

SHA256
3bd3b1b77d93f5e79204a9f302ac2c99ed44764d9dab40b33de824694c44a9e1

SHA512
01d888ee6bf719d101448ead344280ee24e583c560c91e92a0be00eeefdaa3289571cda1e488caee76480154ab42620410f2b3bce2fde86eb2d2b33fe4b18fdc

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-journal

Filesize
512B

MD5
cfddfecdeb79911a9a48b0cc1bf5e5f2

SHA1
afd11d1644b4f2799e5dd88eb600febb07711db6

SHA256
37e79de30a0be41cceccef9bb98d3af3a36430bf224126ed65778b27b4945dbb

SHA512
6dea6cd9d774180f5dbc9473d581d62f3adc333b8eacd1ef946e51e405ac2fb5dee56e32e5360eaa77ebff42a05f68aa0b5332376cf5a0eca73456cac4455d71

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal-megaphone.db-wal

Filesize
32KB

MD5
6d65a06d86ca0f235942fc2462bda7c3

SHA1
876b215bcb37c49280598646d06b2db5acddc804

SHA256
b4d649e5f132cddd540437d90b2df46551effeac44af3f1af2db1c9ab8e024f4

SHA512
1d878564bd0222c6229564fc73e3d27f8909ddad979c04e4eb7bfd9a73e0ff43fd3e27256864525a462b661e3b4336372a55225125ca8e90e4e8e4a0e737c67d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db

Filesize
4KB

MD5
fb85f939d03625642b425f7ff44f0b3c

SHA1
e5f8a9921057da91c1fb7870fcb578be882d14a9

SHA256
ac29a4583b8593d9b4213ebcfd7a80f2eab40bb805a587117e3d3f3d7a20220a

SHA512
12592b4969063e48906ced03b7dbbdfdb170ca46fd703aa4b3862208d91138e32fd1424e1f6290bf7b7730278c042df2d925351bac32069e1266fa71ea986d7d

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-journal

Filesize
512B

MD5
9be1d5bd2ce8a522797c3e6a22475e04

SHA1
a92d78398852b6f206453553dff3eb6148897969

SHA256
1e8d435afd76c7e1ed749d39a12a60f8f02e9b9c11161c87030f925458765d8b

SHA512
5d8a76176a6e84cae1fa345d734475d5da438d27cb0925ac1732d8ccf9b24fdd3f833ffaccf763164df30810bb3156be96f431530d367ff40698060882e831e9

Download Submit
/data/data/org.thoughtcrime.securesmsplus/databases/signal.db-wal

Filesize
1.0MB

MD5
33ce4f12f0fd215a4a3528058e5a9b22

SHA1
4f21f090efd765b84f15d61123d7e0456ca4bdbb

SHA256
ead5161fe6ca85dd2f9853a0dcbcd7555d75cafa5d3832f97169dfc90d79646d

SHA512
1c191dfdd5c4cf4746696868a6cd3b61d5b4a6e4f3b895b26aeaee4f2dc96596802bdd31def750656d525ecd6e5ee720045ccbfe3172ffe19b6efa44f5b46043

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads