Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    b4197d979d39877cb7fe350ce9ff6307177ad8121b9a0f3aa8267fb3fa893ee3

  • Size

    4.4MB

  • Sample

    240910-t8r3jatdmp

  • MD5

    b7ee4f52d6d42c3635c828d81c7d6347

  • SHA1

    a800f4701b3675cd805049966afebca42ed01cae

  • SHA256

    b4197d979d39877cb7fe350ce9ff6307177ad8121b9a0f3aa8267fb3fa893ee3

  • SHA512

    e8eb05125a8668c637120d1766d49e989990b1a73241497890895bae601d346a8d371d6d2edf8690e34d9f246d7ba076af443198f58e2698b4f2010730688d24

  • SSDEEP

    98304:DU0VyAjbf5/vsoDGIBr0pV72K/GeB0pxISVamp6WGIhRm9Pwa/3yM:flFvsoDGyG7N/OpxIyamp6BIuyXM

Malware Config

Extracted

Family

smsfactory

C2

http://smartlink.mobilelinks.xyz

Targets

    • Target

      81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19

    • Size

      4.9MB

    • MD5

      fc0f20db5f8098e42d845492fcf3fca4

    • SHA1

      380e9f9d17c1f13e66d367f4f8726200e2dee07c

    • SHA256

      81d22a908f7989dbafa747a6cc3ce42a1068d5bed9f34cc69fa86672b4d57e19

    • SHA512

      d4fee4bd9bdaa012b57346c407a5e46eeb8908727686bd7022faf704a3baba81b6b6380b260e2f672fd8967b39a4d6f2008b6bf5e629efd163f01a30663d14a1

    • SSDEEP

      98304:UxQ993O4ZwUzMnKTI5qkVe6/7Tr/njx/3lIM1bfzyck/IISqf+HW6sR:KQ993zwU6+I5DE07TrPV/3lImKj7g26y

    • SMSFactory

      SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    • Checks if the Android device is rooted.

    • Acquires the wake lock

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks