Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
90269421ea370b985d162aca2f81fff8378b45e7c6bd25f92288ba78618fd97b
-
Size
119KB
-
Sample
221202-wlm66sec8s
-
MD5
1cd3255c8d73f85fb5e021d6906ab39e
-
SHA1
47304bc0e56b4cf94b8c5f5f0777ecf4f2edbe61
-
SHA256
90269421ea370b985d162aca2f81fff8378b45e7c6bd25f92288ba78618fd97b
-
SHA512
ddb1fc6a0531f08dafe3d400b2bc41155eea0bb0c8f176a204bda43ed52b68cc04f64023c0e6de20ceaea247c566291e46cc0de7f01c8b75d197d798ee4dba30
-
SSDEEP
1536:Wn/bwDHHUQTsX36h0ST44dpapQBCUo95MoqwWWku+8w5eJx8twlaGmMd/7GP:WnmH0QTs66Kz2gCU8uoLceHXB0
Static task
static1
Behavioral task
behavioral1
Sample
PHOTO-GOLAYA.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
PHOTO-GOLAYA.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
PHOTO-GOLAYA.exe
-
Size
237KB
-
MD5
5c94059adb47691be3bd70b628224d42
-
SHA1
2173a63636142956ac0f2032caf3c327f27dd4cc
-
SHA256
5159ded8a0a546ebbed689e870873c7cea047be40d6311cc475d3ca5cedfcd52
-
SHA512
dd9178ee54765bf7c002889ff700516b77c5297e446f284a2f36768325cd5dd531878d1c07fe013024e92c001f9450fb349b26b0608426dda12a7d9f62f74701
-
SSDEEP
3072:6BAp5XhKpN4eOyVTGfhEClj8jTk+0h5Y2AGeS/+Cgw5CKHS:JbXE9OiTGfhEClq9AY2AGe/JJUS
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-