Analysis

  • max time kernel
    2787965s
  • max time network
    99s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    20-03-2022 07:13

General

  • Target

    com.ctgsms.mesglass.apk

  • Size

    6.2MB

  • MD5

    34c24c0cf73289b1d5298960e1d75501

  • SHA1

    6bdcd892e4c8080cbb02beb7ab3dd927cf84f4a4

  • SHA256

    b3d4bbba8aa5451f23f636367db4d16e00c5cc5416770fd5bde80a7fc61fe96e

  • SHA512

    44a5c9bf3dd7e5bc79676ed7291c76fa196296e2b1f880150495bd0289abff75b2c9953975a3b431e34a67c849c63890188b2d3e1a88331902c88890e62d1de3

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.ctgsms.mesglass
    1⤵
    • Loads dropped Dex/Jar
    PID:5080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.ctgsms.mesglass/app_/oat/v2.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.ctgsms.mesglass/app_/v2
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.ctgsms.mesglass/app_/v2
    MD5

    83c215dfb2f0349db1ed2e79f24f03f5

    SHA1

    225f14e569f63c65740503a27f5996c7cc37366f

    SHA256

    624be279bb9ad5ffbedef6b6b62ba9621180190ca369000808c6ec25bea28325

    SHA512

    d35eb1320669dece8a1c2ca1a7420f76efccfc8d505afb0021a2ccab98d1cf36c25d744ac65d448d1be4f61e42a76fb14393625aeb251f071f3f06848651e0b7

  • /data/user/0/com.ctgsms.mesglass/app_/v2
    MD5

    83c215dfb2f0349db1ed2e79f24f03f5

    SHA1

    225f14e569f63c65740503a27f5996c7cc37366f

    SHA256

    624be279bb9ad5ffbedef6b6b62ba9621180190ca369000808c6ec25bea28325

    SHA512

    d35eb1320669dece8a1c2ca1a7420f76efccfc8d505afb0021a2ccab98d1cf36c25d744ac65d448d1be4f61e42a76fb14393625aeb251f071f3f06848651e0b7

  • /data/user/0/com.ctgsms.mesglass/app_/v2.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.ctgsms.mesglass/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.ctgsms.mesglass/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.ctgsms.mesglass/databases/androidx.work.workdb
    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.ctgsms.mesglass/databases/androidx.work.workdb-journal
    MD5

    1265399fc3e8f69d1fe35ee12b99f4db

    SHA1

    5550d4b48f3b2a9bb244f2902999358f2a6c3b5a

    SHA256

    5c142d901c51bd83c97232560b45515bbe903120fac90f2b70a0c24e87aa0e61

    SHA512

    3ec91b3264b04d59e91b1f8abf30de7e8a7a2888118846ac437081b067b2b504999bf7e18db05734501db528342033e367b602b3d7bd562fbc005db297918652

  • /data/user/0/com.ctgsms.mesglass/databases/androidx.work.workdb-shm
    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.ctgsms.mesglass/databases/androidx.work.workdb-wal
    MD5

    1c4b1d9f1193e6610e9393308e2c073d

    SHA1

    ad97f2ac71533f571c2eda6173c3ede877533619

    SHA256

    ed2a4e69c327766941a3cebb27d2c8f1f771943616ed56a7ec07c3a812b3306d

    SHA512

    d5c7766c56d90e88de006062024d94cf54f03e80746e980edce274d0a151f7aa2af559c9378bbfa85e0d8b161dc98600ad76ecb5f1e07e3e5cc0ac4f1d1c8856

  • /data/user/0/com.ctgsms.mesglass/files/log
    MD5

    9f1d3a987b4f11810bff5ba4ff22bfdc

    SHA1

    e85408f7ae43a64154a0c36c46c9192da1102d7f

    SHA256

    88b2c629b004caebaaff0284e06eb73bbcdc9c3472f9b97b9145c66e385739a3

    SHA512

    5b739b94b8da128e17ca83c6e683cd5f71dc0b547d781ea6a30b5e214a697db8c49e6fcdb193100b82d2a026828ed92ae62c3abce488f65900d22cd6e0758f96

  • /data/user/0/com.ctgsms.mesglass/files/log
    MD5

    9ebcb50dbbfa64d0a9e172c37eeed74e

    SHA1

    e6b7676aad5a04ad1406082571a627be5cfb29b5

    SHA256

    a04f163966425040551326f1223f214b559ec6ff35684f962be4eebbfda80a70

    SHA512

    d9cf85c08544564888c9a16d2f0253084889e0fe1ea9b2da26fbb266c3d791963272431018be4c9cfecd761f12a16f1928bb360359e7deaa3d3f7f0a3de7951f

  • /data/user/0/com.ctgsms.mesglass/files/log
    MD5

    9ebcb50dbbfa64d0a9e172c37eeed74e

    SHA1

    e6b7676aad5a04ad1406082571a627be5cfb29b5

    SHA256

    a04f163966425040551326f1223f214b559ec6ff35684f962be4eebbfda80a70

    SHA512

    d9cf85c08544564888c9a16d2f0253084889e0fe1ea9b2da26fbb266c3d791963272431018be4c9cfecd761f12a16f1928bb360359e7deaa3d3f7f0a3de7951f

  • /data/user/0/com.ctgsms.mesglass/files/log.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.ctgsms.mesglass/files/log.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.ctgsms.mesglass/files/oat/log.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.ctgsms.mesglass/shared_prefs/WebViewChromiumPrefs.xml
    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • /data/user/0/com.ctgsms.mesglass/shared_prefs/bshwai.xml
    MD5

    1991ca6303f83bc2dd325556c229b7d2

    SHA1

    16a458cc19f3458870f094c18cd46b5ecd3c340b

    SHA256

    22afa0232a0b8824ec1d40d2f75acce5032f22b9a2b982aed35e3a24b7473f19

    SHA512

    220ff899d8aded071a26c8fae309e9c73fe24f52c8d800accc37b763519027e2a4d978dd3d588f8e10ea52087c61861a3a04455e59af28c99454561d20a05f15