Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

RUSSKAYA-GOLAYA.exe

windows7-x64

8

RUSSKAYA-GOLAYA.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f298a7c077c28a4e6962911a7b04b159befa3b915fa247549ce4fd8c3b45cc83

  • Size

    99KB

  • Sample

    220919-vssvkadgek

  • MD5

    6cff99ee46ee8a310d56f4fb2c50b365

  • SHA1

    b1b87107ae2a16f6d9ce626d812e6d708984fafe

  • SHA256

    f298a7c077c28a4e6962911a7b04b159befa3b915fa247549ce4fd8c3b45cc83

  • SHA512

    0ac916a43d58f0b14b445bf00e0bb7f0aaade8809234224c440cfbe51851d08d9936fdda1fc14168ff7b0c355a12b24b7408e38362cfa39dc4b75f0584239613

  • SSDEEP

    3072:y47excGxFLPkH9SnbZDa2a0paMyVlk0Vff+PlWfoBG:y+eGYtPk0Z+k0Vff+PlY

Score
8/10
discovery

Malware Config

Targets

    • Target

      RUSSKAYA-GOLAYA.exe

    • Size

      149KB

    • MD5

      082651eefe9806f50fb938f393148d45

    • SHA1

      61817d9547cbfc0490511c8599261b62adbc61fa

    • SHA256

      dd854c4d604f2add306b0e004097c9fb897b4107f02407d4b521abbc22919bbd

    • SHA512

      3c8cd68bd19fb0fbb40ed1a5f53d7f83f152c4aced62e137bd7771303da26a4e74ce2648958909f2f92506ea2508665d7139a11b0568740104df87b68bcaf994

    • SSDEEP

      3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hiIvh5iBZ:AbXE9OiTGfhEClq9SE

    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks