Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

GOLAYA-DEVOCHKA.exe

windows7-x64

8

GOLAYA-DEVOCHKA.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f54bebd373ae597a723ea2e2a00a67353e969761e1689fd3e2c91801a072b78

  • Size

    80KB

  • Sample

    221206-t8596ahe2z

  • MD5

    d75481839ad63d6cf8d129de2fac1784

  • SHA1

    9bcbbe8138a026d6ec54e04249ee67e0232cc6c8

  • SHA256

    4f54bebd373ae597a723ea2e2a00a67353e969761e1689fd3e2c91801a072b78

  • SHA512

    baf13e92b582867675e774de55d2dc2d2aa1bec95e056747d8907b11f76f3d961e592f4f168081c8582317fd1346790fee626573856279e63c1ffd2d7cd5621e

  • SSDEEP

    1536:AkDro9Ash6VQZtlRtQlQ7pYw/zQymCJVVBZu3BHp231vcaLCCfVVG6sxaT:DDvsEU8lGpD/NZBZF1vcaLCsT/MM

Score
8/10

Malware Config

Targets

    • Target

      GOLAYA-DEVOCHKA.exe

    • Size

      180KB

    • MD5

      731790f96390935dcf6c9451c7b80c68

    • SHA1

      92e152be11147d807725aa55aea4825675f654f5

    • SHA256

      58a80f311c14624bf50f9e45db0e62a5a4902ecffeeda120ad0d775ac109d4a9

    • SHA512

      76de1b2e02c166d79b1a5079219cc7546a61d1e982a3b58e927695001725c9f50216c2cf4bd3d49d009debd2107f68eaf9751c4bdb0408cf3a508658c58af515

    • SSDEEP

      3072:oBAp5XhKpN4eOyVTGfhEClj8jTk+0hN7+mYnhIAhyYyOK01:fbXE9OiTGfhEClq9s+mYnhIAhy8/1

    Score
    8/10

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks