Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    47E723B9E0DD52CC893FC5CA075C31B4C9FF0FB1C24D0C9786F885976AE476F1.apk

  • Size

    5.0MB

  • Sample

    250217-pz4yhszmx9

  • MD5

    72ed89bdfccf705155b51f1c14c0aef0

  • SHA1

    db81286899fdd7d81ede5f202e8ab24e75855ed6

  • SHA256

    47e723b9e0dd52cc893fc5ca075c31b4c9ff0fb1c24d0c9786f885976ae476f1

  • SHA512

    39ddde52723c83953c55ff3d539de9118e47c14593d5b26661c4a0c5f982c3e5bb9fa1279d329767dd58d53fb14beefb1574e940cb0b7f293dbb522d66008116

  • SSDEEP

    98304:PfEh8RekpJiSqoUNjq0RP88iJGuvWZPtoCtaWlZw5V4pNKmvSqfGJTk/sQSSSj:PcseCiSqxq0RU8iJrvWZPtbpCV43Kisd

Malware Config

Extracted

Family

smsfactory

C2

http://smartlink.mobilelinks.xyz

Targets

    • Target

      47E723B9E0DD52CC893FC5CA075C31B4C9FF0FB1C24D0C9786F885976AE476F1.apk

    • Size

      5.0MB

    • MD5

      72ed89bdfccf705155b51f1c14c0aef0

    • SHA1

      db81286899fdd7d81ede5f202e8ab24e75855ed6

    • SHA256

      47e723b9e0dd52cc893fc5ca075c31b4c9ff0fb1c24d0c9786f885976ae476f1

    • SHA512

      39ddde52723c83953c55ff3d539de9118e47c14593d5b26661c4a0c5f982c3e5bb9fa1279d329767dd58d53fb14beefb1574e940cb0b7f293dbb522d66008116

    • SSDEEP

      98304:PfEh8RekpJiSqoUNjq0RP88iJGuvWZPtoCtaWlZw5V4pNKmvSqfGJTk/sQSSSj:PcseCiSqxq0RU8iJrvWZPtbpCV43Kisd

    • SMSFactory

      SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

    • Smsfactory family

    • Checks if the Android device is rooted.

    • Acquires the wake lock

    • Queries information about active data network

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks