Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
47E723B9E0DD52CC893FC5CA075C31B4C9FF0FB1C24D0C9786F885976AE476F1.apk
-
Size
5.0MB
-
Sample
250217-pz4yhszmx9
-
MD5
72ed89bdfccf705155b51f1c14c0aef0
-
SHA1
db81286899fdd7d81ede5f202e8ab24e75855ed6
-
SHA256
47e723b9e0dd52cc893fc5ca075c31b4c9ff0fb1c24d0c9786f885976ae476f1
-
SHA512
39ddde52723c83953c55ff3d539de9118e47c14593d5b26661c4a0c5f982c3e5bb9fa1279d329767dd58d53fb14beefb1574e940cb0b7f293dbb522d66008116
-
SSDEEP
98304:PfEh8RekpJiSqoUNjq0RP88iJGuvWZPtoCtaWlZw5V4pNKmvSqfGJTk/sQSSSj:PcseCiSqxq0RU8iJrvWZPtbpCV43Kisd
Behavioral task
behavioral1
Sample
47E723B9E0DD52CC893FC5CA075C31B4C9FF0FB1C24D0C9786F885976AE476F1.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
47E723B9E0DD52CC893FC5CA075C31B4C9FF0FB1C24D0C9786F885976AE476F1.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
47E723B9E0DD52CC893FC5CA075C31B4C9FF0FB1C24D0C9786F885976AE476F1.apk
Resource
android-x64-arm64-20240910-en
Malware Config
Extracted
smsfactory
http://smartlink.mobilelinks.xyz
Targets
-
-
Target
47E723B9E0DD52CC893FC5CA075C31B4C9FF0FB1C24D0C9786F885976AE476F1.apk
-
Size
5.0MB
-
MD5
72ed89bdfccf705155b51f1c14c0aef0
-
SHA1
db81286899fdd7d81ede5f202e8ab24e75855ed6
-
SHA256
47e723b9e0dd52cc893fc5ca075c31b4c9ff0fb1c24d0c9786f885976ae476f1
-
SHA512
39ddde52723c83953c55ff3d539de9118e47c14593d5b26661c4a0c5f982c3e5bb9fa1279d329767dd58d53fb14beefb1574e940cb0b7f293dbb522d66008116
-
SSDEEP
98304:PfEh8RekpJiSqoUNjq0RP88iJGuvWZPtoCtaWlZw5V4pNKmvSqfGJTk/sQSSSj:PcseCiSqxq0RU8iJrvWZPtbpCV43Kisd
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Smsfactory family
-
Checks if the Android device is rooted.
-
Acquires the wake lock
-
Queries information about active data network
-
Queries information about the current Wi-Fi connection
Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.
-
Reads information about phone network operator.
-