Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0119830eabf33b481914eba75070ad1f

  • Size

    4.9MB

  • Sample

    231229-xnmh4aacg4

  • MD5

    0119830eabf33b481914eba75070ad1f

  • SHA1

    c028ed75796947c5ca1685963cc30d6491c18436

  • SHA256

    9d673ca9275d08db0069644de30143e3587acac259c83ed01f50bc87614df4fb

  • SHA512

    6a53ad89f039067896fa7070e767fd3badd51aab667532d64ca98cfc53dce61ab5ce77c87f402249feef187d2b5883857d9b1083912b4724abc9f1703fd9f0ae

  • SSDEEP

    98304:YeczuS3mhSn/LsW01urvv2G7aTppUlT7lotPdxjTI8taHU4jXeFrgSqfD0T3aaBv:YtdzYW01ur337lkjPaHVeF0p0raaBco

Malware Config

Extracted

Family

smsfactory

C2

http://smartlink.mobilelinks.xyz

Targets

    • Target

      0119830eabf33b481914eba75070ad1f

    • Size

      4.9MB

    • MD5

      0119830eabf33b481914eba75070ad1f

    • SHA1

      c028ed75796947c5ca1685963cc30d6491c18436

    • SHA256

      9d673ca9275d08db0069644de30143e3587acac259c83ed01f50bc87614df4fb

    • SHA512

      6a53ad89f039067896fa7070e767fd3badd51aab667532d64ca98cfc53dce61ab5ce77c87f402249feef187d2b5883857d9b1083912b4724abc9f1703fd9f0ae

    • SSDEEP

      98304:YeczuS3mhSn/LsW01urvv2G7aTppUlT7lotPdxjTI8taHU4jXeFrgSqfD0T3aaBv:YtdzYW01ur337lkjPaHVeF0p0raaBco

    • SMSFactory

      SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks