Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    96fd7c250adc0d18735369694be34422d7652c87db7e77cba97d0d670103b35a.bin

  • Size

    2.6MB

  • Sample

    250327-131wta1ms2

  • MD5

    7015a22a8f0518c8ba93e23e6411cd00

  • SHA1

    189b4163a711b8fffab6e8c76ec0183357d066c9

  • SHA256

    96fd7c250adc0d18735369694be34422d7652c87db7e77cba97d0d670103b35a

  • SHA512

    0896cfb1ccf3082cc2e6b833829a1b8549df79b19425e32f47e19d7a9caab35132a6caf350c16b9c405c9c7f86359652e61473b3789e1ec56561e2f7cec97d70

  • SSDEEP

    24576:/4m51+WtE0Lb/JhAlY9w931pcdOOUdo7Pxhu9RcvxrvF1hKh4WCLyD:gJWu0J6FPUvFOCLu

Malware Config

Targets

    • Target

      96fd7c250adc0d18735369694be34422d7652c87db7e77cba97d0d670103b35a.bin

    • Size

      2.6MB

    • MD5

      7015a22a8f0518c8ba93e23e6411cd00

    • SHA1

      189b4163a711b8fffab6e8c76ec0183357d066c9

    • SHA256

      96fd7c250adc0d18735369694be34422d7652c87db7e77cba97d0d670103b35a

    • SHA512

      0896cfb1ccf3082cc2e6b833829a1b8549df79b19425e32f47e19d7a9caab35132a6caf350c16b9c405c9c7f86359652e61473b3789e1ec56561e2f7cec97d70

    • SSDEEP

      24576:/4m51+WtE0Lb/JhAlY9w931pcdOOUdo7Pxhu9RcvxrvF1hKh4WCLyD:gJWu0J6FPUvFOCLu

    • Android SoumniBot payload

    • SoumniBot

      SoumniBot is an Android banking trojan first seen in April 2024.

    • Soumnibot family

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks