Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    9fdfa43f7e17f35714a73faaab3c9b77bf0cc8715e60e015ab55fae0d6d8c221

  • Size

    5.0MB

  • Sample

    231220-l48wgscbh8

  • MD5

    6c536766cb29630e538f76c8113ec3ab

  • SHA1

    af21652b543c5c60ed022fddcc5f730dd394c32d

  • SHA256

    9fdfa43f7e17f35714a73faaab3c9b77bf0cc8715e60e015ab55fae0d6d8c221

  • SHA512

    899dd4030c61364a12b00ab147529e4e4cc1bb3a1f82bb7542699fe5bd81690d817eaa4743e10ae24c5afbc401c5dab8255b3ad30631d81e458b63315bcd49d0

  • SSDEEP

    98304:bK89fs4zKwVHfjZ0mwZbctelXlbDcv7/QKp0SqfhXOrtMT:ttzKW1IjlRQYK2z+rtMT

Malware Config

Extracted

Family

smsfactory

C2

http://smartlink.mobilelinks.xyz

Targets

    • Target

      9fdfa43f7e17f35714a73faaab3c9b77bf0cc8715e60e015ab55fae0d6d8c221

    • Size

      5.0MB

    • MD5

      6c536766cb29630e538f76c8113ec3ab

    • SHA1

      af21652b543c5c60ed022fddcc5f730dd394c32d

    • SHA256

      9fdfa43f7e17f35714a73faaab3c9b77bf0cc8715e60e015ab55fae0d6d8c221

    • SHA512

      899dd4030c61364a12b00ab147529e4e4cc1bb3a1f82bb7542699fe5bd81690d817eaa4743e10ae24c5afbc401c5dab8255b3ad30631d81e458b63315bcd49d0

    • SSDEEP

      98304:bK89fs4zKwVHfjZ0mwZbctelXlbDcv7/QKp0SqfhXOrtMT:ttzKW1IjlRQYK2z+rtMT

    • SMSFactory

      SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks