Analysis
-
max time kernel
2787965s -
max time network
99s -
platform
android_x86 -
resource
android-x86-arm-20220310-en -
submitted
20-03-2022 07:13
Static task
static1
Behavioral task
behavioral1
Sample
com.ctgsms.mesglass.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
com.ctgsms.mesglass.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
com.ctgsms.mesglass.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
com.ctgsms.mesglass.apk
-
Size
6.2MB
-
MD5
34c24c0cf73289b1d5298960e1d75501
-
SHA1
6bdcd892e4c8080cbb02beb7ab3dd927cf84f4a4
-
SHA256
b3d4bbba8aa5451f23f636367db4d16e00c5cc5416770fd5bde80a7fc61fe96e
-
SHA512
44a5c9bf3dd7e5bc79676ed7291c76fa196296e2b1f880150495bd0289abff75b2c9953975a3b431e34a67c849c63890188b2d3e1a88331902c88890e62d1de3
Malware Config
Signatures
-
Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.ctgsms.mesglassioc pid process /data/user/0/com.ctgsms.mesglass/app_/v2 5080 com.ctgsms.mesglass /data/user/0/com.ctgsms.mesglass/app_/v2 5080 com.ctgsms.mesglass /data/user/0/com.ctgsms.mesglass/files/log 5080 com.ctgsms.mesglass /data/user/0/com.ctgsms.mesglass/files/log 5080 com.ctgsms.mesglass -
Reads information about phone network operator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
83c215dfb2f0349db1ed2e79f24f03f5
SHA1225f14e569f63c65740503a27f5996c7cc37366f
SHA256624be279bb9ad5ffbedef6b6b62ba9621180190ca369000808c6ec25bea28325
SHA512d35eb1320669dece8a1c2ca1a7420f76efccfc8d505afb0021a2ccab98d1cf36c25d744ac65d448d1be4f61e42a76fb14393625aeb251f071f3f06848651e0b7
-
MD5
83c215dfb2f0349db1ed2e79f24f03f5
SHA1225f14e569f63c65740503a27f5996c7cc37366f
SHA256624be279bb9ad5ffbedef6b6b62ba9621180190ca369000808c6ec25bea28325
SHA512d35eb1320669dece8a1c2ca1a7420f76efccfc8d505afb0021a2ccab98d1cf36c25d744ac65d448d1be4f61e42a76fb14393625aeb251f071f3f06848651e0b7
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
MD5
1265399fc3e8f69d1fe35ee12b99f4db
SHA15550d4b48f3b2a9bb244f2902999358f2a6c3b5a
SHA2565c142d901c51bd83c97232560b45515bbe903120fac90f2b70a0c24e87aa0e61
SHA5123ec91b3264b04d59e91b1f8abf30de7e8a7a2888118846ac437081b067b2b504999bf7e18db05734501db528342033e367b602b3d7bd562fbc005db297918652
-
MD5
7dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
MD5
1c4b1d9f1193e6610e9393308e2c073d
SHA1ad97f2ac71533f571c2eda6173c3ede877533619
SHA256ed2a4e69c327766941a3cebb27d2c8f1f771943616ed56a7ec07c3a812b3306d
SHA512d5c7766c56d90e88de006062024d94cf54f03e80746e980edce274d0a151f7aa2af559c9378bbfa85e0d8b161dc98600ad76ecb5f1e07e3e5cc0ac4f1d1c8856
-
MD5
9f1d3a987b4f11810bff5ba4ff22bfdc
SHA1e85408f7ae43a64154a0c36c46c9192da1102d7f
SHA25688b2c629b004caebaaff0284e06eb73bbcdc9c3472f9b97b9145c66e385739a3
SHA5125b739b94b8da128e17ca83c6e683cd5f71dc0b547d781ea6a30b5e214a697db8c49e6fcdb193100b82d2a026828ed92ae62c3abce488f65900d22cd6e0758f96
-
MD5
9ebcb50dbbfa64d0a9e172c37eeed74e
SHA1e6b7676aad5a04ad1406082571a627be5cfb29b5
SHA256a04f163966425040551326f1223f214b559ec6ff35684f962be4eebbfda80a70
SHA512d9cf85c08544564888c9a16d2f0253084889e0fe1ea9b2da26fbb266c3d791963272431018be4c9cfecd761f12a16f1928bb360359e7deaa3d3f7f0a3de7951f
-
MD5
9ebcb50dbbfa64d0a9e172c37eeed74e
SHA1e6b7676aad5a04ad1406082571a627be5cfb29b5
SHA256a04f163966425040551326f1223f214b559ec6ff35684f962be4eebbfda80a70
SHA512d9cf85c08544564888c9a16d2f0253084889e0fe1ea9b2da26fbb266c3d791963272431018be4c9cfecd761f12a16f1928bb360359e7deaa3d3f7f0a3de7951f
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
21223e9184445fe043476484cd8cb1f9
SHA12b4813f849121d60ba35eb0889080668bb62c778
SHA256bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
SHA512be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48
-
MD5
1991ca6303f83bc2dd325556c229b7d2
SHA116a458cc19f3458870f094c18cd46b5ecd3c340b
SHA25622afa0232a0b8824ec1d40d2f75acce5032f22b9a2b982aed35e3a24b7473f19
SHA512220ff899d8aded071a26c8fae309e9c73fe24f52c8d800accc37b763519027e2a4d978dd3d588f8e10ea52087c61861a3a04455e59af28c99454561d20a05f15