Dumping Motorola W377

Do you have infinity box? This box supports both models and we have successfully dumped a W375 using it, I assume that the W377 would behave in a similar way. The only downside is that the dump is encrypted but there are solutions to that

http//www.forensicfocus.com/usb-port-monitoring-and-flasher-boxes

UFED Physical supports W375, however I do not think that the W377 is the same.

It also supports file system reconstruction.

Thanks Coligulus,

I have purchased the Infinity box and tested it with port monitoring software on the W375 with success. Then I went onto the 377 and it appears that the handset itself is encrypted. Don’t suppose anyone can confirm that this is the case (or isn’t) and if so how the encryption is done?

Thanks

We have found that the encryption takes place in the software. As such with a piece of port monitoring software you can intercept the contents of the dump before it is encrypted.

Have a read of this paper which should hopefully put you in the right direction. It talks about the use of USB port monitoring software from AGG. There is also a serial port monitor they do which is what you will need to use with Infinity Box.

http//www.dfinews.com/article/usb-port-monitoring-and-flasher-boxes

Apologies si666 I glossed over your previous post and missed the part where you said you had indeed already used the port monitoring software.

With regards to the w377 I'm afraid that I haven't handled that particular model so am unsure. I will have a look when I'm back in the lab and see if we have a test handset of that model. If i discover anything new will post it here.

No apologies needed I've just dug the phone out again and am going to try with different monitoring software.

Will let you know how it goes.