Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    55f55a3e96d958657ae8cac226297febb4cb9bc52d5890fd79784e857d71dc68.bin

  • Size

    4.3MB

  • Sample

    241011-14n9ea1fmn

  • MD5

    228aa69cbe07aba41ccf751e554d6ff2

  • SHA1

    2b2239241435ca52d4cde535e0b752f5637dbaf8

  • SHA256

    55f55a3e96d958657ae8cac226297febb4cb9bc52d5890fd79784e857d71dc68

  • SHA512

    945f9604e426fd40b40089ea6279e0d133bc51054c2bf9a2f5d965a7cec0649ec975ab6fefefc2a3dfab58336f4a31f8e73323e89ed48283dabec681d986bbc5

  • SSDEEP

    98304:F9SxDex85DAVismrkOuu65ayklyd60d/0ypft/EVrm4iCd3:Y4857smrkj6lys40ypfhE33

Malware Config

Targets

    • Target

      55f55a3e96d958657ae8cac226297febb4cb9bc52d5890fd79784e857d71dc68.bin

    • Size

      4.3MB

    • MD5

      228aa69cbe07aba41ccf751e554d6ff2

    • SHA1

      2b2239241435ca52d4cde535e0b752f5637dbaf8

    • SHA256

      55f55a3e96d958657ae8cac226297febb4cb9bc52d5890fd79784e857d71dc68

    • SHA512

      945f9604e426fd40b40089ea6279e0d133bc51054c2bf9a2f5d965a7cec0649ec975ab6fefefc2a3dfab58336f4a31f8e73323e89ed48283dabec681d986bbc5

    • SSDEEP

      98304:F9SxDex85DAVismrkOuu65ayklyd60d/0ypft/EVrm4iCd3:Y4857smrkj6lys40ypfhE33

    • Android SoumniBot payload

    • SoumniBot

      SoumniBot is an Android banking trojan first seen in April 2024.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Acquires the wake lock

    • Queries information about active data network

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks