Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
742a36c6ddf37037f4efef6ba54e62b3266e2d91bca671ce4a917218adc1b3a9
-
Size
98KB
-
Sample
220919-v9xj3sefbj
-
MD5
db4d335cc6acb87ae1095338ce1d6f3e
-
SHA1
314fb202afe9fd8d327d22c57cd9eb58b60769ef
-
SHA256
742a36c6ddf37037f4efef6ba54e62b3266e2d91bca671ce4a917218adc1b3a9
-
SHA512
3a3d390e164fdbb7614d5f681416d23fedd914883b9430ab3c3d755d19d6280f8fbc958cac220e246b0b117f99ac16eb153e1d5700587a3bf9148e3bc6876ec6
-
SSDEEP
3072:m47excGxFLPkH9SnbZDaKag1F0JYEZtpAh2:m+eGYtPk0Z+Q1+ah2
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-DEVOCHKA.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
GOLAYA-DEVOCHKA.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
GOLAYA-DEVOCHKA.exe
-
Size
149KB
-
MD5
13135ec7bee7db877b3654059374ebde
-
SHA1
f3f3a8c6b395211ebdbb2a73769e21c401d34e0c
-
SHA256
7dbe9bdea098a5cb0608135c1705d2aa2e080ebc4146a02001a793ff0970252a
-
SHA512
3f7eb418322b1abbe60b2fa6845ffb3e530808739b0dc542707c713f83bc4b02a4a1568a28e9badeb71bd5512e14a47387abe80b2edf0b440f2c40cc3cc08db8
-
SSDEEP
3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hiqtAhp:AbXE9OiTGfhEClq9QtAhp
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-