±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36317
New Yesterday: 0 Visitors: 174

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Nokia TA-1010 inserted SIMs

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

p_dibb
Newbie
 

Re: Nokia TA-1010 inserted SIMs

Post Posted: Dec 03, 19 08:03

- dandaman_24
See Trewmte's post a while back trewmte.blogspot.com/2...tails.html

The link to the software has gone down but here's the literature about it web.archive.org/web/20...gspot.com/

I have used it over the years on dumb / burner phones, spits out a csv of possible IMSI's and ICCID's that have been in the device, I put a disclaimer on the csv, detailing that the device may not have had SIM cards with these details in, as some may be false positives. Its cracking and simple tool to use, you can change the setttings for other countries if you have a device from overseas..

I have a copy of it, PM me if you want a copy and ill forward it to you.

Dan


Thank you for your assistance however I have attempted this and it hasn't recovered the correct data, I suspect because the TA-1010 is the newer branch of burners.  
 
  

polar
Member
 

Re: Nokia TA-1010 inserted SIMs

Post Posted: Dec 03, 19 17:43

If you've parsed the file system from a flash dump, do you have a file with the following path?
Code:
/@SMSSimCust/9xxxxxxxxxxxxxxx.dat
The name of the file (after the 9) is an IMSI. It is also possible to recover (encrypted) IMSIs and ICCIDs from the PACKALID file.
_________________
Arun Prasannan
CCL-Forensics Ltd. 
 
  

trewmte
Senior Member
 

Re: Nokia TA-1010 inserted SIMs

Post Posted: Dec 04, 19 13:13

- polar
If you've parsed the file system from a flash dump, do you have a file with the following path?
Code:
/@SMSSimCust/9xxxxxxxxxxxxxxx.dat
The name of the file (after the 9) is an IMSI. It is also possible to recover (encrypted) IMSIs and ICCIDs from the PACKALID file.


Arun, good info.
_________________
Institute for Digital Forensics (IDF) - www.linkedin.com/groups/2436720
Mobile Telephone Examination Board (MTEB) - www.linkedin.com/groups/141739
Universal Network Investigations - www.linkedin.com/groups/13536130
Mobile Telephone Evidence & Forensics trewmte.blogspot.com 
 

Page 2 of 2
Page Previous  1, 2