Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
15c9e888e80cfa8c2b35657924b6c2ddc39dc9da81b0533a4eb69d95d5a06367
-
Size
98KB
-
Sample
220919-v2mpxaebgn
-
MD5
de472657e5fa234e24bda7c074df68ad
-
SHA1
f925be6c663e3e96010aedfd7ff01d2eb1bb67e6
-
SHA256
15c9e888e80cfa8c2b35657924b6c2ddc39dc9da81b0533a4eb69d95d5a06367
-
SHA512
13f92ec86c6dd8ed8130adbf0fefde97ca7a338241ac3ebe714518b5f1ea9e3df2a2370c3ef47b850a607f692932a2aea148cba43e5e20a63fd4336f13a41902
-
SSDEEP
3072:a47excGxFLPkH9SnbZDaKag1F0JYEZtpAhG:a+eGYtPk0Z+Q1+ahG
Static task
static1
Behavioral task
behavioral1
Sample
RUSSKAYA-GOLAYA.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
RUSSKAYA-GOLAYA.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
RUSSKAYA-GOLAYA.exe
-
Size
149KB
-
MD5
13135ec7bee7db877b3654059374ebde
-
SHA1
f3f3a8c6b395211ebdbb2a73769e21c401d34e0c
-
SHA256
7dbe9bdea098a5cb0608135c1705d2aa2e080ebc4146a02001a793ff0970252a
-
SHA512
3f7eb418322b1abbe60b2fa6845ffb3e530808739b0dc542707c713f83bc4b02a4a1568a28e9badeb71bd5512e14a47387abe80b2edf0b440f2c40cc3cc08db8
-
SSDEEP
3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hiqtAhp:AbXE9OiTGfhEClq9QtAhp
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-