Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
198db57e11dd4c768e167f37042a2bdba85517c5fa28759c3a908cabbc0f4aae
-
Size
100KB
-
Sample
221020-trj1ladbe6
-
MD5
80dcdad17a7530793b9c3f29aca5b5f0
-
SHA1
56557a41781ce7530db4da3e6808bf7991af4d3c
-
SHA256
198db57e11dd4c768e167f37042a2bdba85517c5fa28759c3a908cabbc0f4aae
-
SHA512
afbcef4786efb576354977b9865761af46d73ea05ce9f174b7e25fd84375eeb7ff9ac822f322547f2e676a353170539b755eb15a3acc1597a38ca9ae74a7298b
-
SSDEEP
3072:F47excGxFLPkH9SnbZDa8RfzzQf+K+sA/ys79aWE:F+eGYtPk0Z+8R72+9/xgWE
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-RUSSKAYA.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
GOLAYA-RUSSKAYA.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
GOLAYA-RUSSKAYA.exe
-
Size
151KB
-
MD5
aaf0874d953648fd0ad4e3c5feafadf4
-
SHA1
7cb3b848597874b9cede25f50384b6a8fb7e6b52
-
SHA256
0dd70b2100074429aaf6cd7e05fc1a59a99b966e7e9cece0bd2c480cf22af506
-
SHA512
874e5dcbcba54fd42360a55b8856c6f4820bd688a2c6ed658a72fd20d359456e08bf020ab86b97027f62b8b08fe0b94ef09b6342ccb8afa695778b45cfeccb1f
-
SSDEEP
3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hihuknsA/ys79aWi:AbXE9OiTGfhEClq9Djn9/xgWi
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-