Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c3fd36103f617324d4d2fa833989096c

  • Size

    4.9MB

  • Sample

    240312-whe2dsfc6w

  • MD5

    c3fd36103f617324d4d2fa833989096c

  • SHA1

    f12b9d0c224e0130e33af012b883c6405bb32503

  • SHA256

    0cc18aa0a58ac84d39ea0d681caa378f0c85e39fff230b85239fec5960068870

  • SHA512

    8d4b97982f18c67d90f074c518ea496ce2ba3add85529903108acfe266de02c9aa4c93b93e1fbba99a08658a78fb788450760a2d9c7983e65ed9a9eb195ea00e

  • SSDEEP

    98304:U7pojb8O89LBkmUVyt1CXzTAy6ndf8GDLPGNw9PSqflLO0iX:U7pTO89K/VOCXfm98GPuq5PS0iX

Malware Config

Extracted

Family

smsfactory

C2

http://smartlink.mobilelinks.xyz

Targets

    • Target

      c3fd36103f617324d4d2fa833989096c

    • Size

      4.9MB

    • MD5

      c3fd36103f617324d4d2fa833989096c

    • SHA1

      f12b9d0c224e0130e33af012b883c6405bb32503

    • SHA256

      0cc18aa0a58ac84d39ea0d681caa378f0c85e39fff230b85239fec5960068870

    • SHA512

      8d4b97982f18c67d90f074c518ea496ce2ba3add85529903108acfe266de02c9aa4c93b93e1fbba99a08658a78fb788450760a2d9c7983e65ed9a9eb195ea00e

    • SSDEEP

      98304:U7pojb8O89LBkmUVyt1CXzTAy6ndf8GDLPGNw9PSqflLO0iX:U7pTO89K/VOCXfm98GPuq5PS0iX

    • SMSFactory

      SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    • Acquires the wake lock

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks