Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
9fdfa43f7e17f35714a73faaab3c9b77bf0cc8715e60e015ab55fae0d6d8c221
-
Size
5.0MB
-
Sample
231220-l48wgscbh8
-
MD5
6c536766cb29630e538f76c8113ec3ab
-
SHA1
af21652b543c5c60ed022fddcc5f730dd394c32d
-
SHA256
9fdfa43f7e17f35714a73faaab3c9b77bf0cc8715e60e015ab55fae0d6d8c221
-
SHA512
899dd4030c61364a12b00ab147529e4e4cc1bb3a1f82bb7542699fe5bd81690d817eaa4743e10ae24c5afbc401c5dab8255b3ad30631d81e458b63315bcd49d0
-
SSDEEP
98304:bK89fs4zKwVHfjZ0mwZbctelXlbDcv7/QKp0SqfhXOrtMT:ttzKW1IjlRQYK2z+rtMT
Behavioral task
behavioral1
Sample
9fdfa43f7e17f35714a73faaab3c9b77bf0cc8715e60e015ab55fae0d6d8c221.apk
Behavioral task
behavioral2
Sample
9fdfa43f7e17f35714a73faaab3c9b77bf0cc8715e60e015ab55fae0d6d8c221.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
9fdfa43f7e17f35714a73faaab3c9b77bf0cc8715e60e015ab55fae0d6d8c221.apk
Resource
android-x64-arm64-20231215-en
Malware Config
Extracted
smsfactory
http://smartlink.mobilelinks.xyz
Targets
-
-
Target
9fdfa43f7e17f35714a73faaab3c9b77bf0cc8715e60e015ab55fae0d6d8c221
-
Size
5.0MB
-
MD5
6c536766cb29630e538f76c8113ec3ab
-
SHA1
af21652b543c5c60ed022fddcc5f730dd394c32d
-
SHA256
9fdfa43f7e17f35714a73faaab3c9b77bf0cc8715e60e015ab55fae0d6d8c221
-
SHA512
899dd4030c61364a12b00ab147529e4e4cc1bb3a1f82bb7542699fe5bd81690d817eaa4743e10ae24c5afbc401c5dab8255b3ad30631d81e458b63315bcd49d0
-
SSDEEP
98304:bK89fs4zKwVHfjZ0mwZbctelXlbDcv7/QKp0SqfhXOrtMT:ttzKW1IjlRQYK2z+rtMT
Score10/10-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Acquires the wake lock
-
Reads information about phone network operator.
-