Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

GOLAYA-RUSSKAYA.exe

windows7-x64

8

GOLAYA-RUSSKAYA.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8c6be19ad6da3c2f8a3196e6466fda64

  • Size

    91KB

  • Sample

    240203-qj441scefj

  • MD5

    8c6be19ad6da3c2f8a3196e6466fda64

  • SHA1

    f3705e737b60c45c2bafe6c6747b82f6d9fa3bd6

  • SHA256

    b564fa26340b21e978f3dad3f2817a55460470a82905281119672177ac87c9da

  • SHA512

    3dea9bd4a87b47803021ec6e7bd5e07395d2644bfc3e217090498a455343b5e46ed5819e473b10680e78ec1a1b665f94bafe7d413940673da1206a33c8b65863

  • SSDEEP

    1536:WQwHfvMS0xcGxFyhQkrnb1Mq9WbJOnMA+txGFCr6cXp4xkPdh2B3Sey8:WnHXMpxcGxFyhQ0bOqYuc6c7P6c8

Score
8/10

Malware Config

Targets

    • Target

      GOLAYA-RUSSKAYA.exe

    • Size

      180KB

    • MD5

      b5a44c060c6c4a2d439f9906574a0073

    • SHA1

      89db03d3f47080cca01ebc298f8c989a6b13d3ff

    • SHA256

      d1e011fc69e871b93db9de9f90422097fd88f220ecf664be1d718d2d25fc1c33

    • SHA512

      26b09dc50fe71874c3a96c9434d82681a7ceb588869a5a6e070f5d77daea912d82350745ffd1ecc2fb59c56598fcd15289598cdfca3ddbd6ea416eaf8bb6ae88

    • SSDEEP

      3072:eBAp5XhKpN4eOyVTGfhEClj8jTk+0h+tzYOuI0m7:1bXE9OiTGfhEClq9dYpI0M

    Score
    8/10

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks