Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    e487642dfd5dd58e2644eab220cfa11755d4b143ab7e89fff80a70c0c0c9813e.bin

  • Size

    4.3MB

  • Sample

    241012-1yrscaxhqj

  • MD5

    93da5f5f9844c22b2f5ba0b4584317d0

  • SHA1

    d6bef877a6abb08df507513f71df926cb832accb

  • SHA256

    e487642dfd5dd58e2644eab220cfa11755d4b143ab7e89fff80a70c0c0c9813e

  • SHA512

    1db6bdc1315094c9b74426f3dc282ccf2b44febecbd724df865fd660fa70226a5efb75167302d432ef72f28aac573db27f2be8e1929604715d8b1545f230cd5f

  • SSDEEP

    98304:I9xx0yx8BDAVPsX7guaug05VMIegBJdsm3GrBU/5N6939Ocp+7SdF:l08Bgsln3Cg9h2r99NOcp+7CF

Malware Config

Targets

    • Target

      e487642dfd5dd58e2644eab220cfa11755d4b143ab7e89fff80a70c0c0c9813e.bin

    • Size

      4.3MB

    • MD5

      93da5f5f9844c22b2f5ba0b4584317d0

    • SHA1

      d6bef877a6abb08df507513f71df926cb832accb

    • SHA256

      e487642dfd5dd58e2644eab220cfa11755d4b143ab7e89fff80a70c0c0c9813e

    • SHA512

      1db6bdc1315094c9b74426f3dc282ccf2b44febecbd724df865fd660fa70226a5efb75167302d432ef72f28aac573db27f2be8e1929604715d8b1545f230cd5f

    • SSDEEP

      98304:I9xx0yx8BDAVPsX7guaug05VMIegBJdsm3GrBU/5N6939Ocp+7SdF:l08Bgsln3Cg9h2r99NOcp+7CF

    • Android SoumniBot payload

    • SoumniBot

      SoumniBot is an Android banking trojan first seen in April 2024.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Acquires the wake lock

    • Queries information about active data network

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks