Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    c3fd36103f617324d4d2fa833989096c_JaffaCakes118

  • Size

    4.9MB

  • Sample

    241204-xwcc4askhq

  • MD5

    c3fd36103f617324d4d2fa833989096c

  • SHA1

    f12b9d0c224e0130e33af012b883c6405bb32503

  • SHA256

    0cc18aa0a58ac84d39ea0d681caa378f0c85e39fff230b85239fec5960068870

  • SHA512

    8d4b97982f18c67d90f074c518ea496ce2ba3add85529903108acfe266de02c9aa4c93b93e1fbba99a08658a78fb788450760a2d9c7983e65ed9a9eb195ea00e

  • SSDEEP

    98304:U7pojb8O89LBkmUVyt1CXzTAy6ndf8GDLPGNw9PSqflLO0iX:U7pTO89K/VOCXfm98GPuq5PS0iX

Malware Config

Extracted

Family

smsfactory

C2

http://smartlink.mobilelinks.xyz

Targets

    • Target

      c3fd36103f617324d4d2fa833989096c_JaffaCakes118

    • Size

      4.9MB

    • MD5

      c3fd36103f617324d4d2fa833989096c

    • SHA1

      f12b9d0c224e0130e33af012b883c6405bb32503

    • SHA256

      0cc18aa0a58ac84d39ea0d681caa378f0c85e39fff230b85239fec5960068870

    • SHA512

      8d4b97982f18c67d90f074c518ea496ce2ba3add85529903108acfe266de02c9aa4c93b93e1fbba99a08658a78fb788450760a2d9c7983e65ed9a9eb195ea00e

    • SSDEEP

      98304:U7pojb8O89LBkmUVyt1CXzTAy6ndf8GDLPGNw9PSqflLO0iX:U7pTO89K/VOCXfm98GPuq5PS0iX

    • SMSFactory

      SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    • Smsfactory family

    • Checks if the Android device is rooted.

    • Acquires the wake lock

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks