Last known SIM deta...
 
Notifications
Clear all

Last known SIM details SGH-X830

11 Posts
5 Users
0 Reactions
974 Views
(@gurpreetthathy)
Eminent Member
Joined: 18 years ago
Posts: 40
Topic starter  

How can I get the last known SIM details for the Samsung SGH-X830????


   
Quote
(@zbrojovka)
Eminent Member
Joined: 17 years ago
Posts: 20
 

What do you mean by last known SIM details? Have you seized a phone or are in possession of an evidential item? Has the phone been turned off?


   
ReplyQuote
(@gurpreetthathy)
Eminent Member
Joined: 18 years ago
Posts: 40
Topic starter  

The handset has no SIM card. I dont want use an engineering SIM card as the call register will be deleted.. I need to get the last known SIM details from the memory dump of the handset so I can manually clone the SIM card so I can extract it.


   
ReplyQuote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

Looking in the documentation provided in XRY you will only need the IICID, don't know if this is of any help


   
ReplyQuote
(@zbrojovka)
Eminent Member
Joined: 17 years ago
Posts: 20
 

Looking in the documentation provided in XRY you will only need the IICID, don't know if this is of any help

I concur… I would think the IICID and the IMSI would be enough for you to accomplish what was needed. Perhaps the data carrier will cooperate and offer this information to you. They should have a record of it….or just get a warrant. If you already have the data dump you're a step ahead of me…I'm been trying to research where the SIM data would be found in the memory dump with no luck yet.


   
ReplyQuote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

Looking in the documentation provided in XRY you will only need the IICID, don't know if this is of any help

I concur… I would think the IICID and the IMSI would be enough for you to accomplish what was needed. Perhaps the data carrier will cooperate and offer this information to you. They should have a record of it….or just get a warrant. If you already have the data dump you're a step ahead of me…I'm been trying to research where the SIM data would be found in the memory dump with no luck yet.

If you have got a dump and are looking for the IMSI bear in mind that it normally follows IMSI directly followed by ICCID in reverse nibble

So for instance (I know this isn't a great example) if the IMSI was 123456

it would actually be stored (in hex of cource) 214365

(Special thanks to Alex101 for help on this topic ) )


   
ReplyQuote
(@trewmte)
Noble Member
Joined: 19 years ago
Posts: 1877
 

[If you have got a dump and are looking for the IMSI bear in mind that it normally follows IMSI directly followed by ICCID in reverse nibble

So for instance (I know this isn't a great example) if the IMSI was 123456

it would actually be stored (in hex of cource) 214365

Yes it is, a good example, clear and to the point, stezer2000.


   
ReplyQuote
(@gurpreetthathy)
Eminent Member
Joined: 18 years ago
Posts: 40
Topic starter  

Thanks for all the replies. I have already tried this method by getting a dump of the handset through NS-PRO and opened it in notepad and did a search for 9844 (reverese nibble for 8944) this could not be found. I also opened it in XACT but that was unsucessful. Could the data dump be encrypted in some way?


   
ReplyQuote
(@alexc)
Reputable Member
Joined: 16 years ago
Posts: 301
 

Was the NSPro file an ".sre" file by any chance? That can…complicate things a bit.

I happened to have a read of an X830 to hand and I can't see the ICCID in it…and I know specifically what it should be (because I have the SIM card too!).

Makes me wonder if NSPro is reading the right range; do you have any other tools you could try?


   
ReplyQuote
(@gurpreetthathy)
Eminent Member
Joined: 18 years ago
Posts: 40
Topic starter  

It is an sre file indeed… I could try using SHU..


   
ReplyQuote
Page 1 / 2
Share: