Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    d5f2e9d300cb449206ff82ac1f50a8ccff9778c87d9b8354c703b966ed2aaef0.bin

  • Size

    2.6MB

  • Sample

    250327-15l6fayyat

  • MD5

    2fd9fefa92b0f0b0d1dcac7beb4374b7

  • SHA1

    bd1756a2a2bf4c13e5800b4de157eacfdf538fc1

  • SHA256

    d5f2e9d300cb449206ff82ac1f50a8ccff9778c87d9b8354c703b966ed2aaef0

  • SHA512

    187ce8ad2fe78202e47dd10e36eb7d42df15ff36e7f0bbadb7915be7f0b4bda10cc0d7cbfb741a1bf33cae22c18c00c20d085b563219c074e5dd082f12375e6a

  • SSDEEP

    24576:d4m51+WtE0Tmv8iZ32NNl4jo29SD/mzONPJrpjhDpvVq5rKKPqXbl9FpGPg69nf7:+JWu0To2NI9SDjPHj3ONCjO

Malware Config

Targets

    • Target

      d5f2e9d300cb449206ff82ac1f50a8ccff9778c87d9b8354c703b966ed2aaef0.bin

    • Size

      2.6MB

    • MD5

      2fd9fefa92b0f0b0d1dcac7beb4374b7

    • SHA1

      bd1756a2a2bf4c13e5800b4de157eacfdf538fc1

    • SHA256

      d5f2e9d300cb449206ff82ac1f50a8ccff9778c87d9b8354c703b966ed2aaef0

    • SHA512

      187ce8ad2fe78202e47dd10e36eb7d42df15ff36e7f0bbadb7915be7f0b4bda10cc0d7cbfb741a1bf33cae22c18c00c20d085b563219c074e5dd082f12375e6a

    • SSDEEP

      24576:d4m51+WtE0Tmv8iZ32NNl4jo29SD/mzONPJrpjhDpvVq5rKKPqXbl9FpGPg69nf7:+JWu0To2NI9SDjPHj3ONCjO

    • Android SoumniBot payload

    • SoumniBot

      SoumniBot is an Android banking trojan first seen in April 2024.

    • Soumnibot family

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

    • Requests disabling of battery optimizations (often used to enable hiding in the background).

MITRE ATT&CK Mobile v15

Tasks