Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    25b46ac2947491d6df6af106e65d28e2e999e38acf6e0b5b13c7cafbfda4147a.bin

  • Size

    4.6MB

  • Sample

    250327-13316syxdz

  • MD5

    bd542418210e8661c4b33e93d8f2d222

  • SHA1

    fdad8d7601dcdb2064ffd2a92d7ea1b85a1ed544

  • SHA256

    25b46ac2947491d6df6af106e65d28e2e999e38acf6e0b5b13c7cafbfda4147a

  • SHA512

    e726c91daa9b814360e0e1df2f9a2548a0b199d499892431de6a0ba01c78cb509ca8f93d433b276746c9a572d45d2c8a35a620efaf4bb9eee45280f283455330

  • SSDEEP

    24576:kBP4m51+WtE02qQ/kiKl08btTMbYtSi9IwiWlsOCCcabUZXlujJg4CgpTVxoK1Tn:rJWu02cswaJabUZXl6CgxbDsBFt4Aohh

Malware Config

Targets

    • Target

      25b46ac2947491d6df6af106e65d28e2e999e38acf6e0b5b13c7cafbfda4147a.bin

    • Size

      4.6MB

    • MD5

      bd542418210e8661c4b33e93d8f2d222

    • SHA1

      fdad8d7601dcdb2064ffd2a92d7ea1b85a1ed544

    • SHA256

      25b46ac2947491d6df6af106e65d28e2e999e38acf6e0b5b13c7cafbfda4147a

    • SHA512

      e726c91daa9b814360e0e1df2f9a2548a0b199d499892431de6a0ba01c78cb509ca8f93d433b276746c9a572d45d2c8a35a620efaf4bb9eee45280f283455330

    • SSDEEP

      24576:kBP4m51+WtE02qQ/kiKl08btTMbYtSi9IwiWlsOCCcabUZXlujJg4CgpTVxoK1Tn:rJWu02cswaJabUZXl6CgxbDsBFt4Aohh

    • Android SoumniBot payload

    • SoumniBot

      SoumniBot is an Android banking trojan first seen in April 2024.

    • Soumnibot family

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks