Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

GOLAYA-TOPLESS.exe

windows7-x64

8

GOLAYA-TOPLESS.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b1fd5d60b0245b0ced59354f638d633

  • Size

    89KB

  • Sample

    231225-nn633afaf4

  • MD5

    1b1fd5d60b0245b0ced59354f638d633

  • SHA1

    c846c4c5a61e88ed2d41bb66e3b2ba60785ac214

  • SHA256

    2914a0df9cfea23b47e2be65b38d85f8429b7c8d9824efba11009b0b124ae016

  • SHA512

    b6ee0fcb55529c0f38712aeb9750ae287b05d30d9fb840a4c6a252ddd5be1b183ada0f7df9d8b3a74983cfbd196dff0e0731d7121f5d549404c68fff994104e2

  • SSDEEP

    1536:tvg1WKQmK74VzprUxe7kvLSPkIJNE9sq0Qs07tes/nqgxk5B3JxHKJISOuXsdQ5n:tvgEL7Yo4PkH9sIb8s/q6g3COHJ9bCMa

Score
8/10

Malware Config

Targets

    • Target

      GOLAYA-TOPLESS.exe

    • Size

      180KB

    • MD5

      b5bfc25ec5d0d2576975e6df14cee8f2

    • SHA1

      ff48876248f0f0ff668aa7d67e2243bd9a3fd465

    • SHA256

      e39b4d47bafb657aa37f821378b6140e21643173551f0c01adf8dbf4a3f0d748

    • SHA512

      aaaafcad061f3ce56aeb0a636fb375dbb8eda5d34e4ce743037ff90ec00b3cd972bbf671881f0a3fb3ab9a03f0782944454f78eed2cf33c72aff2e758e52ce6f

    • SSDEEP

      3072:fBAp5XhKpN4eOyVTGfhEClj8jTk+0hD+V64pfPFxI:ibXE9OiTGfhEClq9VzfPFa

    Score
    8/10

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks