Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
fc0f20db5f8098e42d845492fcf3fca4.zip
-
Size
4.4MB
-
Sample
240903-hj9qhazfjr
-
MD5
b7ee4f52d6d42c3635c828d81c7d6347
-
SHA1
a800f4701b3675cd805049966afebca42ed01cae
-
SHA256
b4197d979d39877cb7fe350ce9ff6307177ad8121b9a0f3aa8267fb3fa893ee3
-
SHA512
e8eb05125a8668c637120d1766d49e989990b1a73241497890895bae601d346a8d371d6d2edf8690e34d9f246d7ba076af443198f58e2698b4f2010730688d24
-
SSDEEP
98304:DU0VyAjbf5/vsoDGIBr0pV72K/GeB0pxISVamp6WGIhRm9Pwa/3yM:flFvsoDGyG7N/OpxIyamp6BIuyXM
Behavioral task
behavioral1
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Behavioral task
behavioral3
Sample
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Extracted
smsfactory
http://smartlink.mobilelinks.xyz
Targets
-
-
Target
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19
-
Size
4.9MB
-
MD5
fc0f20db5f8098e42d845492fcf3fca4
-
SHA1
380e9f9d17c1f13e66d367f4f8726200e2dee07c
-
SHA256
81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19
-
SHA512
d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1
-
SSDEEP
98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Checks if the Android device is rooted.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Reads information about phone network operator.
-