Overview

overview

8

Static

static

3

GOLAYA-SEXY.exe

windows7-x64

8

GOLAYA-SEXY.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    3b55dc74b5a32caf0ffa1d8a102476d2
  • Size 80KB
  • Sample231225-y99feshfbj
  • SHA256 744002d187dfb8c074920cc759b8aa65b99d9fc6aed271f827193e6e96cbe3f5
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Targets

    • Target
      GOLAYA-SEXY.exe
    • Size 180KB
    • SHA256 39f420b486362ecca29eb4c068e665c2bd126f6f526049c26491539d1135582f
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks