Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
38833cb5dfcd69570d3346c74b9ef876
-
Size
100KB
-
Sample
231231-q15rwahcc3
-
MD5
38833cb5dfcd69570d3346c74b9ef876
-
SHA1
bf8829c98387bf01a2a80cad1393955eca0ec9b2
-
SHA256
b385184a00e274bc542ddf7980a5cf665d1c4e71207d8b0d316ce87ad1a8fb17
-
SHA512
11dfc1d78a8311db9b4d872c959459a27420e4c16f550f7463ea3dfdfdd5b3ccafc60dca88fe24413cf77d7f606d87265ca65384de79cd956da8badeb906edfa
-
SSDEEP
3072:y47excGxFLPkH9SnbZDaajUVJcRw443hjzG3WA8ujM1jp:y+eGYtPk0Z+TJcRw443h/m6sM1V
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-BABE.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
GOLAYA-BABE.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
GOLAYA-BABE.exe
-
Size
150KB
-
MD5
13064a1549e859958c07462c9b2f0a58
-
SHA1
da6a8be2da028023ad9a350845eae67a64b5bf7e
-
SHA256
dd8a4e021d917b7085788dcdf7d881c679a17416493fcf45ebbfedbed0df32ea
-
SHA512
f28a80bb53fbcb0aed10248a69e7dfbb93671d689d3df6f73eb57b6220348c25cfdb3c0cf2f791aedd44267dba4401d5c0392a2da3f460f25b3509260d2fe533
-
SSDEEP
3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hirrmrtA8ujM1jo:AbXE9OiTGfhEClq9dmLsM1E
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-