Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ac261441028dcedc4abc80bcc9eb3fa54bfa61ed4ccca752ea138a2a44739144

  • Size

    5.0MB

  • Sample

    231220-nqh41shde8

  • MD5

    e41c2a78072e254905049d9504069a56

  • SHA1

    91331d87d375dd9431f0cb7c8c7e86b3e936c441

  • SHA256

    ac261441028dcedc4abc80bcc9eb3fa54bfa61ed4ccca752ea138a2a44739144

  • SHA512

    bec4a4e4e29f027ead9397f156e667a74381b7e8ab50ad43506f066fa040bd8f4c014c580f3277c67e0ecd4ab3bcfc00b99eb06e4f066661ed78c4b56886a7c0

  • SSDEEP

    98304:OOWoWeAe08MmkLOyC3VEgj+DAZbS0/xSqfmtPSBSuCF:OyJq8MnQbj+2bVp+KBS3

Malware Config

Extracted

Family

smsfactory

C2

http://smartlink.mobilelinks.xyz

Targets

    • Target

      ac261441028dcedc4abc80bcc9eb3fa54bfa61ed4ccca752ea138a2a44739144

    • Size

      5.0MB

    • MD5

      e41c2a78072e254905049d9504069a56

    • SHA1

      91331d87d375dd9431f0cb7c8c7e86b3e936c441

    • SHA256

      ac261441028dcedc4abc80bcc9eb3fa54bfa61ed4ccca752ea138a2a44739144

    • SHA512

      bec4a4e4e29f027ead9397f156e667a74381b7e8ab50ad43506f066fa040bd8f4c014c580f3277c67e0ecd4ab3bcfc00b99eb06e4f066661ed78c4b56886a7c0

    • SSDEEP

      98304:OOWoWeAe08MmkLOyC3VEgj+DAZbS0/xSqfmtPSBSuCF:OyJq8MnQbj+2bVp+KBS3

    • SMSFactory

      SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks