Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
138f3083dc61296495e3967f4456e357
-
Size
79KB
-
Sample
231224-1lwwjagceq
-
MD5
138f3083dc61296495e3967f4456e357
-
SHA1
f3d2fd4821728f38a9d6c2786bb172ef80394a1a
-
SHA256
245729ee569d7dbf25f11390de06e96b9ff847c1ed5dd72ca957ec31a15d33ac
-
SHA512
645d4313210357471529e505a32516b89a7a6dce406e3fe63e98b64d86338a60611323ec5d41f373136e778bc513f2dc712928db0faf4c4c58aff3097929ca5d
-
SSDEEP
1536:9vg1WKQmK74VzprUxe7kvLSPkIJNE9sq0Qs07t+vhAUqHRKKXPTKFnmq/MH5YEAd:9vgEL7Yo4PkH9sIbMpAxQKXP+Fr/MHNI
Static task
static1
Behavioral task
behavioral1
Sample
PHOTO-GOLAYA.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PHOTO-GOLAYA.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
PHOTO-GOLAYA.exe
-
Size
180KB
-
MD5
05dcabe4947ada380eb48cf90eb0aa6f
-
SHA1
d11c9319a518ddc14dc62cc138d074b1d908c924
-
SHA256
53b296ba46752bf57d298dfe5ba8b011574253199e57ffd8c8786bb16f642f49
-
SHA512
a336ca962fe97f329fa6968e2532096a0051e5f124c20c7ba74d6688e5b15b2f34980b56f2b6f1e5ff3a53a05936510f22841279497ca50061e5c3fc55ea1614
-
SSDEEP
3072:nBAp5XhKpN4eOyVTGfhEClj8jTk+0hJiH8ga2EPb9ePlO7/IQ1bvatjKv5sK2DdH:qbXE9OiTGfhEClq9j8ga2+b9ePlO7/IR
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-