Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
14ab24883cdc466132b9519c42d212e7
-
Size
99KB
-
Sample
231224-12sttaahbk
-
MD5
14ab24883cdc466132b9519c42d212e7
-
SHA1
5c65c291e4f287596bf6958ad67757dde28cf6a3
-
SHA256
4abb5d9a04d42f49f8ee7323607a94b095f10bc835616508466aa3d3c76b8b0b
-
SHA512
c92e02d86ad95560c1151337bf3778aac8814b0d7d63420ee468920789fd30abeec42b60043d7adf75ef09db0d3b5998de365fa46290eaf4d11d33bf16990114
-
SSDEEP
3072:o47excGxFLPkH9SnbZDaIcsMYwcWlRZ7LTMF+L7DpX:o+eGYtPk0Z+KqhEF+L7Dh
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-TOPLESS.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
GOLAYA-TOPLESS.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
GOLAYA-TOPLESS.exe
-
Size
149KB
-
MD5
45948515abac612ef6990c8afb6a2fc8
-
SHA1
e945d0b8e6e33477dfbca2c18f5517554945f21f
-
SHA256
5d9cf712292390a61de64ba8549352013e69aaf497555483afedb5b14454c387
-
SHA512
d55ff0944f80342fa81aaff2c243e6a8271ab01ea02b91354277a774bc2a94a3a2f5a0aaede1bf5bcaf0e075b01bab557525098803a5fe4fbfb43ed56ec0b724
-
SSDEEP
3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hio1mLMF7Dpn:AbXE9OiTGfhEClq9u1YMF7D1
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-