Overview

overview

8

Static

static

3

GOLAYA-DEVOCHKA.exe

windows7-x64

8

GOLAYA-DEVOCHKA.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7974860a2fa2b02467f19050bd50a43c

  • Size

    132KB

  • Sample

    231226-s2svtadfcj

  • MD5

    7974860a2fa2b02467f19050bd50a43c

  • SHA1

    7a6c33c7fca6e1e6b5813b12656a794eb656b3f0

  • SHA256

    a3d98ebab0a6da46932307224d91ad9eed3a5123470fd4ccf49a2ca90f6f1b1c

  • SHA512

    86a3b0131866f89920f8901156bd7b2f45a50772f83dd0dfd958bc0f08b0a96f0b16fb07eb340b8ed2cba995c8e609c53dbfbc9e2b5a75c9062260fdd6a1f013

  • SSDEEP

    3072:Arz/BRgKl+bsTJbUeosb3WPIoSdJ64Jb2:AP/BRgKwgNUtSWPIoSdw412

Score
8/10
discovery

Malware Config

Targets

    • Target

      GOLAYA-DEVOCHKA.exe

    • Size

      238KB

    • MD5

      bd3875791f0a36ed9122352e1b4fe189

    • SHA1

      a3dff7bd641755b5c8b64c4aab59738ec3842d60

    • SHA256

      1973e4168c5aa035cdc9797ffdede9fac7e84064be5019f533a4ac3de2edef0f

    • SHA512

      1709eff81fc9ee3760f3d6128a228655cadd04144d1f877e2c0a04e6ce2215eeb6c2acebca02d741f3a6090a239f1f652547e4c3badcc99db64dc35a8379ff67

    • SSDEEP

      3072:tBAp5XhKpN4eOyVTGfhEClj8jTk+0hd255d5q5hQ2+Cgw5CKHm:obXE9OiTGfhEClq9uk5d5q5hQXJJUm

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks