Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
257d7b244879bbfd9d6a216a39cfa78d
-
Size
99KB
-
Sample
231225-rsfcpabbc7
-
MD5
257d7b244879bbfd9d6a216a39cfa78d
-
SHA1
e9cf54dbe463c7d417212f7cb4017a557727a241
-
SHA256
e12629b9daae409309854fdb14c78e9e9d6b022512c7d5cbd0c323dd26b972e7
-
SHA512
bd2ef734973deacb9b9619b0ec873fb89328c8cfc4845228770f3ede4c8834ab2a2c82ecf56ec32447feb855e5e3a45bafd9969b829f133b2c4b3ef9641ec7bf
-
SSDEEP
3072:V47excGxFLPkH9SnbZDaFwQtzmhkrUyZ31dLiikrXD:V+eGYtPk0Z+FwMzikrlZXW/
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-PHOTO.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
GOLAYA-PHOTO.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
GOLAYA-PHOTO.exe
-
Size
149KB
-
MD5
bb56c5bb89c3b94f370473b957aece84
-
SHA1
4139ddb92122333d61e57c97cbd75a91bd8a42ed
-
SHA256
b3928bb091873840a406cb0f0c3f5f35fb8c04d729b407672c498f6a78e74f8c
-
SHA512
ff6a55323b554e88d96d3ac29c9e0187f295af7c7065a2bf20b5fe494bdb3068f422142631bc39b24e4174957095e99afffa162065740934f17d94c6cab1a374
-
SSDEEP
3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hiztfVOO0krXu:AbXE9OiTGfhEClq9pf76
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-