Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
7c25e97946dd8c614679bfc6fd76fd00
-
Size
110KB
-
Sample
240128-e2hg7abbg3
-
MD5
7c25e97946dd8c614679bfc6fd76fd00
-
SHA1
9dcf1ed6b9fed1c1aa146c3b0bf80f3de83ad297
-
SHA256
70608d2b9947d66fd55d1bc3854d15b65506860eacebf2213a69c6f61145b27c
-
SHA512
5822e087b10bd52312347e9acc990449171bc9f00006087457f24013c9dc54de665eccf970a6ed4d9040f9c58c3a8cc6bf8139202187cc7f20447035ac4fbac0
-
SSDEEP
3072:Rrz/BRgd7NTpAb+ratuADH3YckoIrDgEmN:RP/BRgV33atjTkogDU
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-DEVOCHKA.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
GOLAYA-DEVOCHKA.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
GOLAYA-DEVOCHKA.exe
-
Size
238KB
-
MD5
1414a0cf3ae3455f7445753aa9ef0ac9
-
SHA1
c6e63022a267155926638e028ba0bfafe614ff15
-
SHA256
2acd2fd6a3fbb4fe40a62ba571ed6015fdbec4a0a6aec9ccde3f33cbc803fee7
-
SHA512
939e9f2dca756893d04a1619537ee7e71c7eda27ebf9785b16fe0e892327ba23d2bbc54d82b97e590d803ce01d89087eaf24b330572aa5ba14c0668d9faf29b0
-
SSDEEP
6144:zbXE9OiTGfhEClq9rZXpdKw/F4qweYG3/jk8hqfFyBgRY7JJUm:/U9XiuiI
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-