Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    ebc4ac9d6dc1308d259c5d2f8919eb48fa1f765cb047d2d36521b05e9c522324.bin

  • Size

    2.6MB

  • Sample

    250123-1zrtqsvqdv

  • MD5

    4d6a06402921c382251bbfd7df9fbf2d

  • SHA1

    8f58c4ce4b466b0746f33604f934d1c91e7e22b7

  • SHA256

    ebc4ac9d6dc1308d259c5d2f8919eb48fa1f765cb047d2d36521b05e9c522324

  • SHA512

    18b4042fbbb4b4b403e41638301f41cc4c46f7d53d8e9d52ad16836fbf144fdb09c2ee517ed4f37dad40bce350548515e1f6d41678245ebf96bf790bb68b1481

  • SSDEEP

    24576:74m51+WtE0k/Npwh7vWm0efist3Vo7GVjqyrlEsXzfkCyjTqOhKnIRO3Nb2CCyqR:kJWu06WtFCV1+UCCPR

Malware Config

Targets

    • Target

      ebc4ac9d6dc1308d259c5d2f8919eb48fa1f765cb047d2d36521b05e9c522324.bin

    • Size

      2.6MB

    • MD5

      4d6a06402921c382251bbfd7df9fbf2d

    • SHA1

      8f58c4ce4b466b0746f33604f934d1c91e7e22b7

    • SHA256

      ebc4ac9d6dc1308d259c5d2f8919eb48fa1f765cb047d2d36521b05e9c522324

    • SHA512

      18b4042fbbb4b4b403e41638301f41cc4c46f7d53d8e9d52ad16836fbf144fdb09c2ee517ed4f37dad40bce350548515e1f6d41678245ebf96bf790bb68b1481

    • SSDEEP

      24576:74m51+WtE0k/Npwh7vWm0efist3Vo7GVjqyrlEsXzfkCyjTqOhKnIRO3Nb2CCyqR:kJWu06WtFCV1+UCCPR

    • Android SoumniBot payload

    • SoumniBot

      SoumniBot is an Android banking trojan first seen in April 2024.

    • Soumnibot family

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks