Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

GOLAYA-RUSSKAYA.exe

windows7-x64

8

GOLAYA-RUSSKAYA.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae946107998ad8e019fd44e28adda01046dc21ca274055cd94754b806e9e76e4

  • Size

    99KB

  • Sample

    220919-wsjsbsffem

  • MD5

    10c1239f47218db37745092d47aee668

  • SHA1

    347116b4338d7b6b8b38ff522e6213461d10b57e

  • SHA256

    ae946107998ad8e019fd44e28adda01046dc21ca274055cd94754b806e9e76e4

  • SHA512

    9469ed7c429f636bf580c8fb7af22284c96b776a6e1a4fb0d783517913d96500e9f336820d30bf0c590418741cba285821ea715df735d9c5e3b95c5116d17824

  • SSDEEP

    3072:747excGxFLPkH9SnbZDaIcsMYwcWlRZ7LTMF+L7Dp7:7+eGYtPk0Z+KqhEF+L7DB

Score
8/10
discovery

Malware Config

Targets

    • Target

      GOLAYA-RUSSKAYA.exe

    • Size

      149KB

    • MD5

      45948515abac612ef6990c8afb6a2fc8

    • SHA1

      e945d0b8e6e33477dfbca2c18f5517554945f21f

    • SHA256

      5d9cf712292390a61de64ba8549352013e69aaf497555483afedb5b14454c387

    • SHA512

      d55ff0944f80342fa81aaff2c243e6a8271ab01ea02b91354277a774bc2a94a3a2f5a0aaede1bf5bcaf0e075b01bab557525098803a5fe4fbfb43ed56ec0b724

    • SSDEEP

      3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hio1mLMF7Dpn:AbXE9OiTGfhEClq9u1YMF7D1

    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks