Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f298a7c077c28a4e6962911a7b04b159befa3b915fa247549ce4fd8c3b45cc83
-
Size
99KB
-
Sample
220919-vssvkadgek
-
MD5
6cff99ee46ee8a310d56f4fb2c50b365
-
SHA1
b1b87107ae2a16f6d9ce626d812e6d708984fafe
-
SHA256
f298a7c077c28a4e6962911a7b04b159befa3b915fa247549ce4fd8c3b45cc83
-
SHA512
0ac916a43d58f0b14b445bf00e0bb7f0aaade8809234224c440cfbe51851d08d9936fdda1fc14168ff7b0c355a12b24b7408e38362cfa39dc4b75f0584239613
-
SSDEEP
3072:y47excGxFLPkH9SnbZDa2a0paMyVlk0Vff+PlWfoBG:y+eGYtPk0Z+k0Vff+PlY
Static task
static1
Behavioral task
behavioral1
Sample
RUSSKAYA-GOLAYA.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
RUSSKAYA-GOLAYA.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
RUSSKAYA-GOLAYA.exe
-
Size
149KB
-
MD5
082651eefe9806f50fb938f393148d45
-
SHA1
61817d9547cbfc0490511c8599261b62adbc61fa
-
SHA256
dd854c4d604f2add306b0e004097c9fb897b4107f02407d4b521abbc22919bbd
-
SHA512
3c8cd68bd19fb0fbb40ed1a5f53d7f83f152c4aced62e137bd7771303da26a4e74ce2648958909f2f92506ea2508665d7139a11b0568740104df87b68bcaf994
-
SSDEEP
3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hiIvh5iBZ:AbXE9OiTGfhEClq9SE
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-