Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a66257f393d1df41b278ea3f44bba3d56ccdb9f0f2b04a5a32d96399162e8d3a
-
Size
4.9MB
-
Sample
231220-mytp2sehb7
-
MD5
3cb054964c107ac7ff9b52c9a6a12c5d
-
SHA1
61dbb60ea61a8d87f6fd57bd1f605e0d22feb636
-
SHA256
a66257f393d1df41b278ea3f44bba3d56ccdb9f0f2b04a5a32d96399162e8d3a
-
SHA512
9dcd0964462aab4a098ce49b258e8787ac1f315e37964ae9ff4c51d48cbb5ce09f6e2bd483ea72dd14d31ce9760ceb44f622e005ea277685481098a91e5cb2a6
-
SSDEEP
98304:9AE1h0cmTYHybHoHhPTUkDimH5O0UdNuJSqfh3xxaJ:9AE70TlbHoFTUE5O5N4XhxaJ
Behavioral task
behavioral1
Sample
a66257f393d1df41b278ea3f44bba3d56ccdb9f0f2b04a5a32d96399162e8d3a.apk
Behavioral task
behavioral2
Sample
a66257f393d1df41b278ea3f44bba3d56ccdb9f0f2b04a5a32d96399162e8d3a.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
a66257f393d1df41b278ea3f44bba3d56ccdb9f0f2b04a5a32d96399162e8d3a.apk
Resource
android-x64-arm64-20231215-en
Malware Config
Extracted
smsfactory
http://smartlink.mobilelinks.xyz
Targets
-
-
Target
a66257f393d1df41b278ea3f44bba3d56ccdb9f0f2b04a5a32d96399162e8d3a
-
Size
4.9MB
-
MD5
3cb054964c107ac7ff9b52c9a6a12c5d
-
SHA1
61dbb60ea61a8d87f6fd57bd1f605e0d22feb636
-
SHA256
a66257f393d1df41b278ea3f44bba3d56ccdb9f0f2b04a5a32d96399162e8d3a
-
SHA512
9dcd0964462aab4a098ce49b258e8787ac1f315e37964ae9ff4c51d48cbb5ce09f6e2bd483ea72dd14d31ce9760ceb44f622e005ea277685481098a91e5cb2a6
-
SSDEEP
98304:9AE1h0cmTYHybHoHhPTUkDimH5O0UdNuJSqfh3xxaJ:9AE70TlbHoFTUE5O5N4XhxaJ
Score10/10-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Acquires the wake lock
-
Reads information about phone network operator.
-