Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d2511a80ee7ff4d1427bf18c9709e977be64162d66a4f4018ad2cbb7820d3f1f.bin

  • Size

    2.6MB

  • Sample

    250327-15gkys1mx4

  • MD5

    d7628e9146c4061f919e3c4fba167cb1

  • SHA1

    e5f656a217af2fd07c6599e80f7216eaa2319364

  • SHA256

    d2511a80ee7ff4d1427bf18c9709e977be64162d66a4f4018ad2cbb7820d3f1f

  • SHA512

    6b893475acfcdad42a36eb85d00144b0fe2ef784fc26aede7bb5a628f67252bd38117380ce444415c5999f2942eb37162251d2f1c96733cf5fe8ffaa6af07ab5

  • SSDEEP

    24576:r6lk4m51+WtE0P057IPeK1lhFdzlt7vGgOwvoqWFwRGer0GuMokDnuApvgkCua/n:mJWu0EQ1vJ4Ao8Cj

Malware Config

Targets

    • Target

      d2511a80ee7ff4d1427bf18c9709e977be64162d66a4f4018ad2cbb7820d3f1f.bin

    • Size

      2.6MB

    • MD5

      d7628e9146c4061f919e3c4fba167cb1

    • SHA1

      e5f656a217af2fd07c6599e80f7216eaa2319364

    • SHA256

      d2511a80ee7ff4d1427bf18c9709e977be64162d66a4f4018ad2cbb7820d3f1f

    • SHA512

      6b893475acfcdad42a36eb85d00144b0fe2ef784fc26aede7bb5a628f67252bd38117380ce444415c5999f2942eb37162251d2f1c96733cf5fe8ffaa6af07ab5

    • SSDEEP

      24576:r6lk4m51+WtE0P057IPeK1lhFdzlt7vGgOwvoqWFwRGer0GuMokDnuApvgkCua/n:mJWu0EQ1vJ4Ao8Cj

    • Android SoumniBot payload

    • SoumniBot

      SoumniBot is an Android banking trojan first seen in April 2024.

    • Soumnibot family

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks