Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
d7768cd2c1a59fd45ec3fdacf938e66d200967ac9b079bca8b7a69d0aa50bf3e
-
Size
123KB
-
Sample
220919-bnd13aebhk
-
MD5
e759203d83d08b586a48d61e08f0a9dc
-
SHA1
13b94ea67e5d7c366fd767d2679f952fe6e9f74f
-
SHA256
d7768cd2c1a59fd45ec3fdacf938e66d200967ac9b079bca8b7a69d0aa50bf3e
-
SHA512
40f5e9fe1d3ba40ef51408322807c03b329c5ebf729b717d7d80cab5eb40b63cb7857dc1ab8fe75cf35614f895821fec2ecb9495e12c65eff79fb84f8f5cf693
-
SSDEEP
1536:MUnVN5HOHUEs6iqcuyIJ4fnb07w3317NT0+5hNsMJhFHaj+Plyx0du/BSSTrDNPO:MUnLYCq/Fufnb07YfLzJhFw0YRUNebUp
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-DEVOCHKA.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
GOLAYA-DEVOCHKA.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
GOLAYA-DEVOCHKA.exe
-
Size
238KB
-
MD5
abba37efd3a03df55c6a615e9762f9e5
-
SHA1
0cbd015b62ef4a188e29d5ccc82eff6dbb75e02e
-
SHA256
47a9d86207338ad60e9820fe3c947485290d6138540354fd741747395229875d
-
SHA512
31c133da63cde479a2e16a4472a8c9bdc98db41750bc594e4165e30c87767d845dd4ecd40e064760bc1e04208f267ba0c63a8651f7278b8c2c3d29b00159cf74
-
SSDEEP
3072:TBAp5XhKpN4eOyVTGfhEClj8jTk+0hFHPhnw4NSmNjxXyAIVragLR+ncvLn1l+C6:+bXE9OiTGfhEClq9cyHO9XFAugLKJJUm
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-