smsworm | a96d4c2d7ecaaaf99b8c045139555aedae62199d4f595d904c982738774cd8cf

Analysis

max time kernel
99s
max time network
151s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
14/04/2025, 16:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

A96D4C2D7ECAAAF99B8C045139555AEDAE62199D4F595D904C982738774CD8CF.apk
Size

28.9MB
MD5

e647ba625bab420ceb912af32459f039
SHA1

bd09351d20c1058691823226cf4af06675af6530
SHA256

a96d4c2d7ecaaaf99b8c045139555aedae62199d4f595d904c982738774cd8cf
SHA512

7880b8fefb5e19cf6c51e71b40f7407e4c4c8ee21ffce2f02d7e7627f322d1ede13c944781a1e43cba6283c636582ca6c7e6ee8186f89467ab7d8d52aae4977a
SSDEEP

786432:Ug2gvEd8aGYJrmsUsvsPmmgeAIqRvj3lX7tqr3G7E:UgbvSPGWjRvseKXu3lX7tmW7E

Score

10^/10

smsworm defense_evasion discovery evasion execution impact infostealer persistence spyware trojan

Malware Config

Signatures

Android SMSWorm payload 1 IoCs

resource	yara_rule
behavioral1/memory/4220-1.dex	family_smsworm

SMSWorm
SMSWorm is an Android malware that can spread itself to a victim's contact list via SMS first seen in May 2021.
trojan infostealer spyware smsworm
Smsworm family
smsworm

Checks if the Android device is rooted. 1 TTPs 2 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.greentower.topbox
/system/xbin/su	com.greentower.topbox

Loads dropped Dex/Jar 1 TTPs 13 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/data/com.greentower.topbox/.jiagu/classes.dex	4220	com.greentower.topbox
/data/data/com.greentower.topbox/.jiagu/classes.dex!classes2.dex	4220	com.greentower.topbox
/data/data/com.greentower.topbox/.jiagu/classes.dex!classes3.dex	4220	com.greentower.topbox
/data/data/com.greentower.topbox/.jiagu/classes.dex!classes4.dex	4220	com.greentower.topbox
/data/data/com.greentower.topbox/.jiagu/tmp.dex	4220	com.greentower.topbox
/data/data/com.greentower.topbox/.jiagu/tmp.dex	4252	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.greentower.topbox/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.greentower.topbox/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
/data/data/com.greentower.topbox/.jiagu/tmp.dex	4220	com.greentower.topbox
/data/data/com.greentower.topbox/.jiagu/classes.dex	4339	com.greentower.topbox:lumsdk_svc_job
/data/data/com.greentower.topbox/.jiagu/classes.dex!classes2.dex	4339	com.greentower.topbox:lumsdk_svc_job
/data/data/com.greentower.topbox/.jiagu/classes.dex!classes3.dex	4339	com.greentower.topbox:lumsdk_svc_job
/data/data/com.greentower.topbox/.jiagu/classes.dex!classes4.dex	4339	com.greentower.topbox:lumsdk_svc_job
/data/data/com.greentower.topbox/.jiagu/tmp.dex	4339	com.greentower.topbox:lumsdk_svc_job
/data/data/com.greentower.topbox/.jiagu/tmp.dex	4339	com.greentower.topbox:lumsdk_svc_job

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.greentower.topbox

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.greentower.topbox
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.greentower.topbox:lumsdk_svc_job

Checks the presence of a debugger
defense_evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.greentower.topbox
Framework service call	android.app.IActivityManager.registerReceiver	com.greentower.topbox:lumsdk_svc_job

Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.greentower.topbox
Framework service call	android.app.job.IJobScheduler.schedule	com.greentower.topbox:lumsdk_svc_job

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.greentower.topbox
Framework API call	javax.crypto.Cipher.doFinal	com.greentower.topbox:lumsdk_svc_job

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.greentower.topbox

com.greentower.topbox
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4220
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.greentower.topbox/.jiagu/tmp.dex --output-vdex-fd=42 --oat-fd=43 --oat-location=/data/data/com.greentower.topbox/.jiagu/oat/x86/tmp.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4252

com.greentower.topbox:lumsdk_svc_job
1⤵
- Loads dropped Dex/Jar
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4339

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.greentower.topbox/.jiagu/classes.dex

Filesize
5.9MB

MD5
e705b16ab1c6761d175b778a4876d9d5

SHA1
518327858a60784b0d3be6bed4bc504ed48c4a99

SHA256
64b3d98d30c9dfcb316eb08b9978e706799a2723ac8fc8ba94ab5983cbbc6f3d

SHA512
9f418d94e906698191adf4686d98fef835a457e5ff4eb0d8e81541b47b6fa3297a51f5a88827fb4ad6fe5faf511694c777250780df1e2347fe278c192e55e081

Download Submit
/data/data/com.greentower.topbox/.jiagu/classes.dex!classes2.dex

Filesize
6.6MB

MD5
a36b89b8e7ecb29db833ec19bfa7075f

SHA1
f2d1046ebc235d400742351483417708ca103a28

SHA256
746393a3f90ddb61f0a1420ebcc6bc0531ad766c2c7d07d7a6b3078233d36344

SHA512
3d79749f2f0476ca3ebea80b68ba3734681282a9b6382418debb3c3711a7e3d272eef109e0c93af115248ab87b1db4c06a658471f3724879abad7c3107e3b0c6

Download Submit
/data/data/com.greentower.topbox/.jiagu/classes.dex!classes3.dex

Filesize
2.6MB

MD5
cb63b0efd3261e10820052956f3523aa

SHA1
9b211b83dab7ab33e349af03140b4bf7c37f40d6

SHA256
d60133641b24bf1feebd47bebe90aa564fe461655b45a2e88578cc0cf74b701f

SHA512
0ebfda13adce0109f898d58833134677160d640f3133a0e71e2f7eeb90dc94aa5dab12c4bbafa6ffce57b7a9a28da77e2b02d1aba2d7a1f614271e4d23e434ac

Download Submit
/data/data/com.greentower.topbox/.jiagu/classes.dex!classes4.dex

Filesize
88KB

MD5
c32af0cfbcca4809dedb3e24129f13f8

SHA1
be97bf18087063e6928ce20d5a0ab2ad1eb98d31

SHA256
31e56cdb9391cdb8c3ff620edc2008f4d08d43521e27fa1d38fee48a079d0115

SHA512
5ceba053ea5abfe105bc949ddad9ffa183f2aebfd1e88b08695706e2033b994bc8b6e75c76052af902513fa111c86f5275fc6a68dd1ddfa58e8ff1902732572a

Download Submit
/data/data/com.greentower.topbox/.jiagu/libjiagu.so

Filesize
568KB

MD5
71b524f16d37b3770f48abdd05c385b0

SHA1
7ec324ca5b1dd77e4fce74d6479a67a13672df30

SHA256
0d6ffa0d39f05b60c60646f26a736e6ea735298bc21b25c8b8214bb26e8ab95d

SHA512
86a5d20f6c99f75ef80e3e4331e44550984956e83e5f2cb250d2f4d412604ef55dd3c2fdefc0420c6c5daffe1020fe68d85145e234762a39a7be821f15742737

Download Submit
/data/data/com.greentower.topbox/.jiagu/tmp.dex

Filesize
284B

MD5
f1771b68f5f9b168b79ff59ae2daabe4

SHA1
0df6a835559f5c99670214a12700e7d8c28e5a42

SHA256
9f8898ce35a47aeafced99ea0d17c33e73037bb2307c7688e50819966f4ae939

SHA512
dae27d19727b89bec49398503baa6801640540355688dfabbe689c97545295c2c2d9b0f0dcd7cbc4cfbf701d0c0c3289e647a152f49ff242d1ecc741efe4145d

Download Submit
/data/data/com.greentower.topbox/Reg/app_info.z

Filesize
82B

MD5
1c1fd4a16b1a71d375fb65bf664a8cab

SHA1
288042957095f16347f663ccaaebe97663521c93

SHA256
1ab7b773c68626d7403a01dbe1695b2c58e9c3a784054f7e77ecf114747cb009

SHA512
d3733e53010d74a21f3dcf93035c2bead06dee0d14746f83972cbad2899b488c7826f0cefa4847015e05739506e6e201616d89a62a1980ee9df3b32c782fa192

Download Submit
/data/data/com.greentower.topbox/Reg/app_info.z

Filesize
244B

MD5
2343b8787e0110c2ac3817dc9d55a88f

SHA1
b523a737863880c0c4631f420b22867b5dda6da9

SHA256
9d59927b6aa37a3c7bf4b9f14971d36eac5fc1f9e47235f998b12d773c6da824

SHA512
0a866235c5e93aee9a27dccf00187c90b82741527846fad274f682efca256fb54736b8296234f16d7121265604e3470801abc01dea5cb6d28de3ebae771ac739

Download Submit
/data/data/com.greentower.topbox/cache/log/lum_sdk_app.log

Filesize
4KB

MD5
e31ff3dc7c62960205f8ee49f414062c

SHA1
abcc3f084006ee827bffaac73160186994317fc3

SHA256
898b9be48d993ac72320bd76941284d5c79e896923d385e878ff36822846d163

SHA512
00c174622e8cc0cc13d2a6d7a69d28fcf04856528648998a53f7028eb5b4bcebd9d0d8dd172ed2346f42ce4ef64074d08d1b339539b68b9a24436cdcec7ce056

Download Submit
/data/data/com.greentower.topbox/cache/log/lum_sdk_svc_job.log

Filesize
3KB

MD5
836b78fc4c367623ec9db94f71cb703b

SHA1
c392edc71c32a07977ec4b849f598c19eee39ffa

SHA256
147926954741e50b600c81a2d09b2e8a162305722174eeadc60ffe70bf5a9f32

SHA512
e1225e2c422dd59fb4b4036df64b38a517a87f4a4ffd713f233633d6dada2e12b6dfce22a0bf8343780068a08c2a897cb7e8687b770c74887072052ffc0875a0

Download Submit
/data/data/com.greentower.topbox/cache/volley/-2356467701009951

Filesize
2KB

MD5
745be87555d26d08907c96cdc6928b00

SHA1
32f79aa4a1cf6029f688dd297bf038a1f5611e7f

SHA256
4e9a183dd18a270b013d5aa7f76690832f02de7696fab5ddbf808f8081e56251

SHA512
68044854665ee9499499d8b32af4b9ddfadc6bd9e00052d97c2ae1fb40955c72ad96ab9b765610c71cc54c63028d30e301461943da2a181063340cdf13a8ce29

Download Submit
/data/data/com.greentower.topbox/cache/volley/13853970381230889123

Filesize
984B

MD5
08e3fac2058fdb32ba0125c5af73b9c0

SHA1
7c03b0db9903e72d5accbe2ec9c94101d963b2a1

SHA256
f9247515af8cf288c7711d1415335d0cbd4302cffc86bf85eeaabc51477bd14b

SHA512
b04d51e4324d44360e07a5ac76725f799d2660eb275d8f66a07b2e1714fad7e352dcc84dc5eb921c8f4257fb17c6e6c4dc7c8033fa7056f58b240735e234c79e

Download Submit
/data/data/com.greentower.topbox/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.greentower.topbox/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
03fded629f1793ad74911a18e6edffab

SHA1
352b78fcfd0b2c8498d62b81aef8d746ac5ff83b

SHA256
89e1ff140cc29e89a6c692a19ef3c92064abaa24e36e161bab9ba34e30482687

SHA512
7a0fbb0da3d9d1a97cf84506dbb2783f69084fe126933db4b29ee4eb9ad1a522fe189bd5b7da73491c110cfcf5a4123101c899fe594a2dba342bdeeb1a3810b3

Download Submit
/data/data/com.greentower.topbox/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.greentower.topbox/databases/com.google.android.datatransport.events-wal

Filesize
44KB

MD5
b2b80df269bac7be0ee5e0295dd770e9

SHA1
d1f9ccfbfc9eefe5b37df63442487c299c3e4264

SHA256
a028d6c0206b520bc58ad30e03f4f75a332010a3108a3f1cca6fb00a96c6b9b4

SHA512
3ae8283ae8e1cfd9b3c608ce6e1b42d6a058426d405c2fd9d6405f8cd00b88e6ce77fb2b350c80cc4c51eee225e0eb2d3ef5c8bb9c0a7186e06094a18b76d63a

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db

Filesize
16KB

MD5
dffcc7d59365056aabb344c48194058e

SHA1
f6b89cb984d19806d0b2d889e68099ba084309a9

SHA256
9de04b984b783a82c3326ae39a6e99d3ccc0d7be210bc699f857b687e47f6dad

SHA512
2b43850e99259b371e90b253fd2241d3d10f3a7710c0ecae455b490a135ddbc52a54d051a7430ae34e1307b2ff761f9890019cd6964e55c75ab89d4a0a2ed99d

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f85b9093da8c89effe4a48ad99b5b53b

SHA1
5a0d3552fce0211fc38087aad5c3deb276b9a868

SHA256
e2aa180f845407a98510ab807f5f380fdd63f9e7d52c4d1ffee01e305778d41c

SHA512
0df096c50cbd449a57b3a8633dcccd84e748f89d3bafd7937023af77ddd28cef3c04bb969c634f30f20eb2bfc9f4c0d296c8963b4a8f1c474dc68ab57c4839c2

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db

Filesize
16KB

MD5
1e24137cc142a7e0c99c603f55e7efb5

SHA1
e0757045dd0511ab6c0f77f3f0d125691f2f126e

SHA256
942be01913a2d649d8786a9a3cc9be65831a4110fe48ee51aeb4825916c6ad11

SHA512
7a7713bb8721d3c7337d4c3758a791e55e3cc7013264447293ba23614fff4f6b22ecdb4c3c50758d3f9522e317f10c5c2c0453fe32cbb8095110a2ee548f47f8

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db

Filesize
16KB

MD5
860ec1e8d526eab52bed0b8531c0bc07

SHA1
47ee71cd388d4bd4f07cfe876763494c417f738c

SHA256
6945645c7b8a804fe49dae126481296b4d1bf51703c5cdaae5c926c1d820acdf

SHA512
af5f450c5be4c479d3eaeff554f5b09e364044f0e3e62161b6ef654ec18142309e8a4d2614ed974638e5d48430eec127ab467fe04c81fb606c28afb904f0f800

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6626783af72a0ccdceace420b7e7e50f

SHA1
b902a217ee0cf292c54c17e85c1ae8d11fa8812a

SHA256
82561f2414a061fb1151f505c883b3890c63e28bdad0535b6e89eeea0365c139

SHA512
793d8e1373c1818fa8baed46f4c2981b29cf2826935602efb825924cfa6534765f0204a7f9217fc87f5d82787e059cc97a2a1e935fe02183f116fbfc0487776b

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
87a2df56c24b598d7d4dc8c21d657280

SHA1
46118794dea5834368e2c3803101214973c7a817

SHA256
c43ffab6f2218dd89b2980f6d9170bd8a9ae00bd6464d4fc7d76230841341182

SHA512
af71220363ed1d94702a7205cf4e13edb342ff4a1e5004d393824742861394b343158f49e1525c54ff272724bbb6991b39ae72c782559c77f6f611ef972fa2e2

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
3f4f24134b83bcbd9fa787eec9b36f01

SHA1
bed8607d2a1c593640e4346acefcd9de8e38c3f3

SHA256
548110c0f12b81b93670419f1fe443c1eac2776a8ff8b26f57544efc697b5d25

SHA512
8ab1de6b12d6e398affb61fadf414c9a8a9c57dbddb14ca02960b6bcbfb230225bc4ee28d21b90fd0374eae64270a0df536b8b7ba5b96a6110afcdb925fcf83f

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
670e2b3d38caba248aac18ec5e6115d5

SHA1
15954b490ff23ff716a0fd5a906d041833e7ced7

SHA256
7fea64ac8ced4170ea28cdbcff1959c12d48602c42e61eac979f228a1b87d698

SHA512
823201a22d7e684745b69168fac103a0652354dbb397e43d692881cf569b2d95171815bdbad5850dcf9b78d7477b9701383756f5c307e01915a585761a5d29e3

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
81bedec4e1b34ee4c085f3eb3aca544f

SHA1
faba754a0b10e87f818459146855e03d5846f54c

SHA256
1424e8a3bc050488eeb07f03da640bf9fb3f3d315843bd328c248ed9aed73914

SHA512
df4bed2174802bfd77fc6f2b8b5916a2fb585e7bd27fbf168902d7386d6d6ee5159e1ff47c543b7a0335e1c695119892e58747fa761721b180464b9283a1983e

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a095af867797baa4608391dc29f488c5

SHA1
376f2068b7080d5363c70b366d162df3b01519f7

SHA256
1b09c80bdb6a6ccc981e11a47798ecb1a567c29653583eb7618ca86672cc4f3a

SHA512
b5ccb017ff29dd5ae786fd8e2ebf94185b4661ab8cfb9b6894bc71d19d37e7f93587bf29c270fe56fe4d70f4875ebb2a512a2eee4d1710f7c00b5f8bfdf24c11

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
3a06f6caae4e01c77352ac8293a4e9f3

SHA1
1d46899f86f11ece18d288d62e433141652e5136

SHA256
91174032fbcf6c03b02906d4dae533fbddfddf47e375dd671f09f890e5e5c2ed

SHA512
998af59c201577a03643d401900e8ba66a9fb0828b3caddf78b42bf8a989179870c45e29ff8ab0625783b313eb5550f46c9cf115673c4495c5b51a5ae6f927eb

Download Submit
/data/data/com.greentower.topbox/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a0acc11d97ac1e789bc8dcce487d88d9

SHA1
eeb685de2debb2fe56b8defd917417c7e0d2000f

SHA256
7ce7d260a00c629fd8a145a7c32ad8bc887bd38a2b070a311e8e0ef4b28dcf80

SHA512
e2bf3155839f442b95b7a45a24fb1cb28b79caf928426e58c0ae4a0cfd378a8194a3bff6a881db0e292f2cbb2e988d226ec5d89caa3c49007053d804d3b6c740

Download Submit
/data/data/com.greentower.topbox/databases/lum_sdk_perr.db-journal

Filesize
512B

MD5
ac6ae61bdf8e4e17e64d89d95f00a651

SHA1
2078c2ed3d2f5a7ba3bb6fcfa0e850896d00b791

SHA256
0676a2070bdb55f7d22636c4836d75289be7ff7f093c9205ce905403f7ef0c9a

SHA512
9113d68112af1f9f9af84e0b6c426e2391421820d0a9c3625d9309e15e564fe34300bb49edac3feb2612ff74ba5c0391b8f11001bf421d88a09f828cc68df921

Download Submit
/data/data/com.greentower.topbox/databases/lum_sdk_perr.db-wal

Filesize
221KB

MD5
ae7148a31d9cf63308614e3f9d3c0a31

SHA1
cf527a2ff53ff81e1ed9231df827be96fe5bfc9a

SHA256
4f8896c8b4fe3431cbb49a453377611b5dd5e663f97559d1c638fca86ae1b394

SHA512
7b615b7a2185655320c12a3581e20a4bef64d3497cf053505e5fb09a93a553da45ba6635a5c0431ed0ffb57250729cde422e91659e5de52b011c7b384831ce6d

Download Submit
/data/data/com.greentower.topbox/databases/lum_sdk_perr.db-wal

Filesize
245KB

MD5
119574678476e679ac880faae1d75c07

SHA1
f1d4117d52059e16bb31026a655ab0afa0420a83

SHA256
a0179600c5fa22f650bca9ba17a5478c690081611253983594554185c01a453c

SHA512
bc90d8bdf74718f9a94d8cf12e7b2798b6d8a81b252a1d2ef0125c7915037dc20e3ef64e61c29ee71f2d50139b454a287c5ac727a10292b48cd5a0b8707e1bcb

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/67FD7789029C-0001-107C-6A136D8A88CEBeginSession.cls_temp

Filesize
77B

MD5
8e858647ef6c982101b5982d6ad1b121

SHA1
b424d903bc6f31eea8f439496a3dec652132fd47

SHA256
d53388b2d2d2c69ccd6246601b12ac65cae84663d2105657e6359319fbb06f7f

SHA512
9d36f1dfe4e041b4fc0e9afa642fa6609189e7ad92abc35ca7b66bd9b8ecdf5afb9b44ea3f236251d498f7dbeca807631264de08339bd686b4b31dc7e201e490

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/67FD7789029C-0001-107C-6A136D8A88CEBeginSession.json

Filesize
132B

MD5
0e615884aa0316663fda281032864c10

SHA1
dce0f3439a2abb3c3b211b5964a8ffbe7e0e845a

SHA256
3eb6d45de3cbe016e282613075192455408a34f2fbf5c5e3d01a088ce0d5b13a

SHA512
3db1484317208e5300db990402b79f818660677febb5b7d72c67671158c933048e6c17b42596c59cc23cde495aa9a020aa3cdfe952fe5bc58593f804b1523b0d

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/67FD7789029C-0001-107C-6A136D8A88CESessionApp.cls_temp

Filesize
116B

MD5
875cb1e608c2d6267a59e6ccda3fd021

SHA1
2cd262d44b5ee4e8e508b3247e95aa280a9b6612

SHA256
60432d9188393620ce151130cc7939a6d0f3d1412f8439a5eb71b56a9a94e52e

SHA512
d313ac2633af4c366efdcdfa1bdf7d11826ed40d5ca9e4225e8562b0894af262fa979e9114bf49a0213fb07b45fd507a4cb01d12da395647df61fdf42a83b1e1

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/67FD7789029C-0001-107C-6A136D8A88CESessionApp.json

Filesize
230B

MD5
0eb147275d2b715548b20b99f532f63f

SHA1
9644f3bfc919f90d61942eff3ff0fd560a392c1f

SHA256
84222aae2639faa8931be77b4d6186a1eb8c2972c3d8780f5a138c0a797662fb

SHA512
90d10c046aafaaec43a95a1a0d70befd73302532f428da7b78dadd0e584f689a3ab8699929fcb6ff73bd2e039882f39d1afdea71e5b94531166ab2bb034f9a07

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/67FD7789029C-0001-107C-6A136D8A88CESessionDevice.cls_temp

Filesize
49B

MD5
3d7c79d0d8891f731b04d52e07e14cb1

SHA1
60b358c831e08f104928cb06a70e31c8e8093ea7

SHA256
2022317b32d835ee84335ff41f9a1abe355081469f1858314f53168831884884

SHA512
37bb13fb40fd0e006004067a1ec4e2f200902d55d512ed9153ebaf7728f6ef62b3b10d2a9d8ab1713cb957d33bcff7b910a30bcac08d3e42b53bffa53bc170f7

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/67FD7789029C-0001-107C-6A136D8A88CESessionDevice.json

Filesize
203B

MD5
6ed3f47f26392d5b90bb74feaaf86333

SHA1
b8b6923e3a5dbb4b12e0e594094f220e40570176

SHA256
1c6a9b308828c0f0e5afdef2941edd48b835de0b4f301691e7147610279632ba

SHA512
59a3bc8a61251d15a83dd42d4ecb9491ca33982c254eb0fd073b1ab09a0e136c90a289d51f5f5152ad35344da58e7f96e699a92c9ea4819395a44548e7815e74

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/67FD7789029C-0001-107C-6A136D8A88CESessionOS.cls_temp

Filesize
14B

MD5
9b3d4522944ce6396563812bfdb92fa9

SHA1
6d2a6133c8f01938a48ccc77ef86ad8ca335c020

SHA256
d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

SHA512
091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/67FD7789029C-0001-107C-6A136D8A88CESessionOS.json

Filesize
54B

MD5
93023624eb8dff5c20050da136aaae0a

SHA1
acfd1ffed752c28fb135ba83c0c6345ddf2f6995

SHA256
968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

SHA512
bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
402B

MD5
0e4d4c21bd641ad574fd5a93a3e39353

SHA1
94f675c8dd9931f8f3bcec16b52ccc3a64325519

SHA256
ff46b280e940e45d5f54c281bd4e7e31e310216408bcd3a059b9c08cb14d9372

SHA512
d9f8a6f76d9b580a673a57a1b95a90f2e59d6249a42033f82e7f9c843f44fa7aa0a266fe71ed81e6740fc7675f6f9651ac027e2c6e030d5fcb91155894819585

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
825B

MD5
a78b64fa6f7a25603d9f38148a2a169b

SHA1
f928f16075c924af89e5b408aa46c5792c823cd4

SHA256
fdbeedfd4c2405be71c220add08d74025f14fa899cde5354554fe35e909fe632

SHA512
e3bef12af8d6648f28f25a28b712bf47546f5120391583bad2adae36100a0dff313839a3a965f142389e3340018a92eafdcb17ea697b05e99c2e81cf589c3bed

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.greentower.topbox/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_472569ef-4377-44ea-ab37-554ba9c8ff0b_1744664458517.tap

Filesize
324B

MD5
e9e613567569f2190428f7b81262b5fb

SHA1
704d57f8b62f184e1c16f16110890e0e3b08e6ab

SHA256
72939a18f0988c3569d419e72327cce25e19c50c29e3894202221aa13e36ad46

SHA512
0d92bef603c0d3ae857f9a6ac4263eb0c2da6593b3fc996cf4e37115ccde9f33690dbfd3ab2b6167db6e30466a3a68249d7a066a26e139375d3d2d4c0f78288b

Download Submit
/data/data/com.greentower.topbox/files/lumsdk_sc.dat

Filesize
240B

MD5
d9a93dbd8d076cf729c42baddbb91658

SHA1
070919f37bdb517479b5f3c7f9de26e336c37c96

SHA256
c94d85dd4f220a186b7fd1efce48f2d1c6f7fcfaadf5e5a013f2b7344ccf975a

SHA512
5096d0ffd8380dc9d402472dd575a30bdeb76a691f4a775dd5b3957868d07a39df279e4db01f03751d7bea430f61a338aaa48facc4ade6fc3078d54bed751c1c

Download Submit
/data/data/com.greentower.topbox/no_backup/com.google.InstanceId.properties

Filesize
63B

MD5
49d08e715e9bab1fe1cf6a988962bd7f

SHA1
6df8370b56335d5d742589628c8819db43a4429c

SHA256
92897c5b3955fe1ce08ae5192f0860b8b143b4ccf7909321a2a8d8e7fe579419

SHA512
a70e73ce25558af36e1f1e6659fd4488b3f590de765a17a3402c290f4e2d9d6c1cae1b639c0538a49f2d0884870ece4cde39317b3b5de52d68709435cd082507

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads