Overview

overview

8

Static

static

3

GOLAYA-PHOTO.exe

windows7-x64

8

GOLAYA-PHOTO.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    1efbb85440299120ab067ac2b569dd5e

  • Size

    136KB

  • Sample

    231230-2sbplshce3

  • MD5

    1efbb85440299120ab067ac2b569dd5e

  • SHA1

    e56cfbe224249e4343821db79f3c1881a66c203b

  • SHA256

    ecf26209b4937cd41cdf83d14c39598a1aad08870fb0d508767a10e62b44e5d1

  • SHA512

    2258c08f767604d5304bde5f28896709db32a0aa2c6fa02b1feba77c5de516d7206908b92daad0c4bd3de8890d5e9e6e5bcb73a0a8636fecec62d4b0da222057

  • SSDEEP

    3072:qO9dMSFBmZAE9zLEDal88AtFZWeV4TfkElX6u727juTa2AYiHb:XbsZ59zLE+l87Z12lX6u461A1

Score
8/10
discovery

Malware Config

Targets

    • Target

      GOLAYA-PHOTO.exe

    • Size

      239KB

    • MD5

      35e34f63ef670bfe60a3c221d567e654

    • SHA1

      88fcc3e6e54f3a3db84246e6764f27dd6936f1ce

    • SHA256

      6278837bb874cec55e1e76a4216e80a969ecb0f3997f95476532c8093fd68416

    • SHA512

      423191b07909d5aedef8bc3cc5584ac70b7278993572d4f7a0600a731101b054a8abdb6aeb52a17c34b37bb3f46fc2d1a53eadea313203d72551eea8a492a766

    • SSDEEP

      6144:EbXE9OiTGfhEClq9P0A6XAM93eblYuaOJJUG:QU9XiuioblYuaQ

    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks