Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
a3902130d0e4255a056318bbe115d92f
-
Size
78KB
-
Sample
240225-mnes5sae4x
-
MD5
a3902130d0e4255a056318bbe115d92f
-
SHA1
5c3c0d8ee79b040272d314d0eb182d6fbbb9b6d1
-
SHA256
da29e94ad5942d77164a58ef991f8972fa08b9009935689a1bd6d6d0d968a108
-
SHA512
17c526b738ec9ee1243c76652f878bdfefc658f2ee319c7552cafac11faf754be4801b357e8e90f3e5837ccd40540b4b8fcbf5319c89ba61a5e526a8c2a4e51f
-
SSDEEP
1536:vQwfwimgTY23tG90wIsWfHlWKSd+QSqWU5FMQCoFuJlmSKV/I0JZXdLxoSg5Kgm6:vnoimg13tG90HdQ3Sqt2oFUU5/IOBdLa
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-SEXY.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
GOLAYA-SEXY.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
GOLAYA-SEXY.exe
-
Size
180KB
-
MD5
55e47874ef9912a4309c4c90af7b67f8
-
SHA1
bda07533ed744d3c78ee34ab416d883504212e3e
-
SHA256
c3199ed5f9a3d4e51e4ff8287875a04a91602e348dcef11c403e90d96eea59f7
-
SHA512
d01550350e18c0507e8f45e1a970cfd6bfa910c2a334fe65ffc26f7347e9b967906a950bd6918fa2c19aebfdf087f2f82bf3a47e96af1ef903697d3672edad36
-
SSDEEP
3072:TBAp5XhKpN4eOyVTGfhEClj8jTk+0h6ejmo:+bXE9OiTGfhEClq9dejD
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-