Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3c084c39e9e61b1c9d13b073924019ca

  • Size

    5.0MB

  • Sample

    240101-gc3syacfbm

  • MD5

    3c084c39e9e61b1c9d13b073924019ca

  • SHA1

    3531f86172cf83bcfad106eaa9ee113359927245

  • SHA256

    e0ab4557fcead70a50cc7f879d4568174ceb20a4a86de86a30c5cfb0f6e5e637

  • SHA512

    fa69856a532386725622369cff141e3f2a9d9cf307f6980c310a54713cd8b07fead1e46d441e325dfcd7e002b1eb6aacc3693fd30fac815bbd82caf240201e43

  • SSDEEP

    98304:L3G//qv5p0ASraNHtxPzvK7l/9+0BqRuqjxpxMKasd0EXDSqf9XrP1ER5:L2//qv5yASreHtRziJcSguqjmKwETn7C

Malware Config

Extracted

Family

smsfactory

C2

http://smartlink.mobilelinks.xyz

Targets

    • Target

      3c084c39e9e61b1c9d13b073924019ca

    • Size

      5.0MB

    • MD5

      3c084c39e9e61b1c9d13b073924019ca

    • SHA1

      3531f86172cf83bcfad106eaa9ee113359927245

    • SHA256

      e0ab4557fcead70a50cc7f879d4568174ceb20a4a86de86a30c5cfb0f6e5e637

    • SHA512

      fa69856a532386725622369cff141e3f2a9d9cf307f6980c310a54713cd8b07fead1e46d441e325dfcd7e002b1eb6aacc3693fd30fac815bbd82caf240201e43

    • SSDEEP

      98304:L3G//qv5p0ASraNHtxPzvK7l/9+0BqRuqjxpxMKasd0EXDSqf9XrP1ER5:L2//qv5yASreHtRziJcSguqjmKwETn7C

    • SMSFactory

      SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Matrix

Tasks