Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

GOLAYA-RUSSKAYA.exe

windows7-x64

8

GOLAYA-RUSSKAYA.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f82ac0a9942ebf1b46b9811e5e7cbdac

  • Size

    79KB

  • Sample

    231228-zxr62sacd5

  • MD5

    f82ac0a9942ebf1b46b9811e5e7cbdac

  • SHA1

    ae591b736167881323f50bd56d681e10cdc4ed8b

  • SHA256

    616d896955464bbf7265e8e05449bca836f67d2b7b7fbff146507a25a669f350

  • SHA512

    b8e57780fa2c023676c5eb0b397a64415b7332e41951878b3e2a58c91c8c7c72df43f11e1274df39edbc9c0b5cb32c70ab6e7e73caa9a6e8e6c88ef9c006e9da

  • SSDEEP

    1536:Zvg1WKQmK74VzprUxe7kvLSPkIJNE9sq0Qs07t+vhAUqHRKKXPTKFnmq/MH5YEAe:ZvgEL7Yo4PkH9sIbMpAxQKXP+Fr/MHNx

Score
8/10

Malware Config

Targets

    • Target

      GOLAYA-RUSSKAYA.exe

    • Size

      180KB

    • MD5

      05dcabe4947ada380eb48cf90eb0aa6f

    • SHA1

      d11c9319a518ddc14dc62cc138d074b1d908c924

    • SHA256

      53b296ba46752bf57d298dfe5ba8b011574253199e57ffd8c8786bb16f642f49

    • SHA512

      a336ca962fe97f329fa6968e2532096a0051e5f124c20c7ba74d6688e5b15b2f34980b56f2b6f1e5ff3a53a05936510f22841279497ca50061e5c3fc55ea1614

    • SSDEEP

      3072:nBAp5XhKpN4eOyVTGfhEClj8jTk+0hJiH8ga2EPb9ePlO7/IQ1bvatjKv5sK2DdH:qbXE9OiTGfhEClq9j8ga2+b9ePlO7/IR

    Score
    8/10

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks