Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9862cb475e96000a88bdeff4e7fb0f012dd46ac06d8be12b9f8f19aeef62b2ef
-
Size
5.1MB
-
Sample
231220-ks8wnsgee8
-
MD5
413fa1f9137959d0c31f894ff9dda698
-
SHA1
12ca67eb3df41d05d38070d92123a92348439732
-
SHA256
9862cb475e96000a88bdeff4e7fb0f012dd46ac06d8be12b9f8f19aeef62b2ef
-
SHA512
f155ee0ab9b80a8f38aff44250c4577fd072b6ebcab94504b2b9971ee55c9f8b11fbca9e5e58c8529b4e35c7e7fca16517b3d8bc58d0987eb46606e0e65f523e
-
SSDEEP
98304:oCmDPd8oXbBLyUqN1t0fo+EhmUvgMEI7Z7PnFOxkcrlmSqfpDs4AE/:2e4tGUoj0gQ/g1FOJkjYhE/
Behavioral task
behavioral1
Sample
9862cb475e96000a88bdeff4e7fb0f012dd46ac06d8be12b9f8f19aeef62b2ef.apk
Behavioral task
behavioral2
Sample
9862cb475e96000a88bdeff4e7fb0f012dd46ac06d8be12b9f8f19aeef62b2ef.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
9862cb475e96000a88bdeff4e7fb0f012dd46ac06d8be12b9f8f19aeef62b2ef.apk
Resource
android-x64-arm64-20231215-en
Malware Config
Extracted
smsfactory
http://smartlink.mobilelinks.xyz
Targets
-
-
Target
9862cb475e96000a88bdeff4e7fb0f012dd46ac06d8be12b9f8f19aeef62b2ef
-
Size
5.1MB
-
MD5
413fa1f9137959d0c31f894ff9dda698
-
SHA1
12ca67eb3df41d05d38070d92123a92348439732
-
SHA256
9862cb475e96000a88bdeff4e7fb0f012dd46ac06d8be12b9f8f19aeef62b2ef
-
SHA512
f155ee0ab9b80a8f38aff44250c4577fd072b6ebcab94504b2b9971ee55c9f8b11fbca9e5e58c8529b4e35c7e7fca16517b3d8bc58d0987eb46606e0e65f523e
-
SSDEEP
98304:oCmDPd8oXbBLyUqN1t0fo+EhmUvgMEI7Z7PnFOxkcrlmSqfpDs4AE/:2e4tGUoj0gQ/g1FOJkjYhE/
Score10/10-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Acquires the wake lock
-
Reads information about phone network operator.
-