Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9862cb475e96000a88bdeff4e7fb0f012dd46ac06d8be12b9f8f19aeef62b2ef

  • Size

    5.1MB

  • Sample

    231220-ks8wnsgee8

  • MD5

    413fa1f9137959d0c31f894ff9dda698

  • SHA1

    12ca67eb3df41d05d38070d92123a92348439732

  • SHA256

    9862cb475e96000a88bdeff4e7fb0f012dd46ac06d8be12b9f8f19aeef62b2ef

  • SHA512

    f155ee0ab9b80a8f38aff44250c4577fd072b6ebcab94504b2b9971ee55c9f8b11fbca9e5e58c8529b4e35c7e7fca16517b3d8bc58d0987eb46606e0e65f523e

  • SSDEEP

    98304:oCmDPd8oXbBLyUqN1t0fo+EhmUvgMEI7Z7PnFOxkcrlmSqfpDs4AE/:2e4tGUoj0gQ/g1FOJkjYhE/

Malware Config

Extracted

Family

smsfactory

C2

http://smartlink.mobilelinks.xyz

Targets

    • Target

      9862cb475e96000a88bdeff4e7fb0f012dd46ac06d8be12b9f8f19aeef62b2ef

    • Size

      5.1MB

    • MD5

      413fa1f9137959d0c31f894ff9dda698

    • SHA1

      12ca67eb3df41d05d38070d92123a92348439732

    • SHA256

      9862cb475e96000a88bdeff4e7fb0f012dd46ac06d8be12b9f8f19aeef62b2ef

    • SHA512

      f155ee0ab9b80a8f38aff44250c4577fd072b6ebcab94504b2b9971ee55c9f8b11fbca9e5e58c8529b4e35c7e7fca16517b3d8bc58d0987eb46606e0e65f523e

    • SSDEEP

      98304:oCmDPd8oXbBLyUqN1t0fo+EhmUvgMEI7Z7PnFOxkcrlmSqfpDs4AE/:2e4tGUoj0gQ/g1FOJkjYhE/

    • SMSFactory

      SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks