Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
e3d202572720124b52461f26bb3d2cfed997f210fdaac4788dfbedd6fe394e27
-
Size
108KB
-
Sample
221020-sg8qjabad4
-
MD5
80bb10f3a2d567f553cda484875103e0
-
SHA1
72cb92920c000267c39f326dccc75f53adbb2338
-
SHA256
e3d202572720124b52461f26bb3d2cfed997f210fdaac4788dfbedd6fe394e27
-
SHA512
f9650073c648f10d07ac2c7ca4989bbad97f3e1178f4653f6650c1cda592fd12b366240cfeeecdcf6ad1d591f608713ceb88fce111d58e087465a17de4990abf
-
SSDEEP
3072:2vgdpmgumQlGpD/53Sq5iDkReAoqFysV19HWU:2vgHTMGxB3cOeAJI4HWU
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-BABE.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
GOLAYA-BABE.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
GOLAYA-BABE.exe
-
Size
167KB
-
MD5
ef228a906001229e469f7b61f89a0481
-
SHA1
d7bdedbf34f268353ef139e90455c9bfedbe5b25
-
SHA256
cd739c5a166fcea3510d2ab393e64da1ed3956cf19082258ec383e94b12baa52
-
SHA512
f191afd9e1059e4595a08ace41c65d2820ae6643a40e3c6877d6665462046cd7c8e0c3ff9a990fdad5912b663945f148787ac358c7b86d790e497a6acc2c45fa
-
SSDEEP
3072:mBAp5XhKpN4eOyVTGfhEClj8jTk+0hAy8nnDFysV19HWn:dbXE9OiTGfhEClq928nnDI4HWn
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-