Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a1c3b9ff6a6f80e92535c0bb8cd3dfff4a1bd7e807f4b03574a0bc9a5c9275d6

  • Size

    5.0MB

  • Sample

    231220-mdyhhadac2

  • MD5

    bb56334ba731146b309098b9b588dfeb

  • SHA1

    0a5b8879e65c0966aac026e416e2e86acf6bfc69

  • SHA256

    a1c3b9ff6a6f80e92535c0bb8cd3dfff4a1bd7e807f4b03574a0bc9a5c9275d6

  • SHA512

    b83f1eb57c7cad28335d088eea3a5e662c1ba4f9f002059d178fbb79b30630eb419e214dfcdb7d28fd97e22ebcf1de32e26446a2613cdc8ba3fb8b6d251db921

  • SSDEEP

    98304:TPJDZHWDinCSUTb9H4AMYH9n4tkTfJtsfZqXqCz16vjSSLO7KCy7IDNpXiCnMymA:TPJBWDqCSU9HsBt08gB4vjPLvp7I/SCl

Malware Config

Extracted

Family

smsfactory

C2

http://smartlink.mobilelinks.xyz

Targets

    • Target

      a1c3b9ff6a6f80e92535c0bb8cd3dfff4a1bd7e807f4b03574a0bc9a5c9275d6

    • Size

      5.0MB

    • MD5

      bb56334ba731146b309098b9b588dfeb

    • SHA1

      0a5b8879e65c0966aac026e416e2e86acf6bfc69

    • SHA256

      a1c3b9ff6a6f80e92535c0bb8cd3dfff4a1bd7e807f4b03574a0bc9a5c9275d6

    • SHA512

      b83f1eb57c7cad28335d088eea3a5e662c1ba4f9f002059d178fbb79b30630eb419e214dfcdb7d28fd97e22ebcf1de32e26446a2613cdc8ba3fb8b6d251db921

    • SSDEEP

      98304:TPJDZHWDinCSUTb9H4AMYH9n4tkTfJtsfZqXqCz16vjSSLO7KCy7IDNpXiCnMymA:TPJBWDqCSU9HsBt08gB4vjPLvp7I/SCl

    • SMSFactory

      SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks