Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    a66257f393d1df41b278ea3f44bba3d56ccdb9f0f2b04a5a32d96399162e8d3a

  • Size

    4.9MB

  • Sample

    231220-mytp2sehb7

  • MD5

    3cb054964c107ac7ff9b52c9a6a12c5d

  • SHA1

    61dbb60ea61a8d87f6fd57bd1f605e0d22feb636

  • SHA256

    a66257f393d1df41b278ea3f44bba3d56ccdb9f0f2b04a5a32d96399162e8d3a

  • SHA512

    9dcd0964462aab4a098ce49b258e8787ac1f315e37964ae9ff4c51d48cbb5ce09f6e2bd483ea72dd14d31ce9760ceb44f622e005ea277685481098a91e5cb2a6

  • SSDEEP

    98304:9AE1h0cmTYHybHoHhPTUkDimH5O0UdNuJSqfh3xxaJ:9AE70TlbHoFTUE5O5N4XhxaJ

Malware Config

Extracted

Family

smsfactory

C2

http://smartlink.mobilelinks.xyz

Targets

    • Target

      a66257f393d1df41b278ea3f44bba3d56ccdb9f0f2b04a5a32d96399162e8d3a

    • Size

      4.9MB

    • MD5

      3cb054964c107ac7ff9b52c9a6a12c5d

    • SHA1

      61dbb60ea61a8d87f6fd57bd1f605e0d22feb636

    • SHA256

      a66257f393d1df41b278ea3f44bba3d56ccdb9f0f2b04a5a32d96399162e8d3a

    • SHA512

      9dcd0964462aab4a098ce49b258e8787ac1f315e37964ae9ff4c51d48cbb5ce09f6e2bd483ea72dd14d31ce9760ceb44f622e005ea277685481098a91e5cb2a6

    • SSDEEP

      98304:9AE1h0cmTYHybHoHhPTUkDimH5O0UdNuJSqfh3xxaJ:9AE70TlbHoFTUE5O5N4XhxaJ

    • SMSFactory

      SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks