Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
f82ac0a9942ebf1b46b9811e5e7cbdac
-
Size
79KB
-
Sample
231228-zxr62sacd5
-
MD5
f82ac0a9942ebf1b46b9811e5e7cbdac
-
SHA1
ae591b736167881323f50bd56d681e10cdc4ed8b
-
SHA256
616d896955464bbf7265e8e05449bca836f67d2b7b7fbff146507a25a669f350
-
SHA512
b8e57780fa2c023676c5eb0b397a64415b7332e41951878b3e2a58c91c8c7c72df43f11e1274df39edbc9c0b5cb32c70ab6e7e73caa9a6e8e6c88ef9c006e9da
-
SSDEEP
1536:Zvg1WKQmK74VzprUxe7kvLSPkIJNE9sq0Qs07t+vhAUqHRKKXPTKFnmq/MH5YEAe:ZvgEL7Yo4PkH9sIbMpAxQKXP+Fr/MHNx
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-RUSSKAYA.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
GOLAYA-RUSSKAYA.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
GOLAYA-RUSSKAYA.exe
-
Size
180KB
-
MD5
05dcabe4947ada380eb48cf90eb0aa6f
-
SHA1
d11c9319a518ddc14dc62cc138d074b1d908c924
-
SHA256
53b296ba46752bf57d298dfe5ba8b011574253199e57ffd8c8786bb16f642f49
-
SHA512
a336ca962fe97f329fa6968e2532096a0051e5f124c20c7ba74d6688e5b15b2f34980b56f2b6f1e5ff3a53a05936510f22841279497ca50061e5c3fc55ea1614
-
SSDEEP
3072:nBAp5XhKpN4eOyVTGfhEClj8jTk+0hJiH8ga2EPb9ePlO7/IQ1bvatjKv5sK2DdH:qbXE9OiTGfhEClq9j8ga2+b9ePlO7/IR
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-