Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c3b0b10224fd44ecc70cff511a90ce77
-
Size
98KB
-
Sample
240312-sqyxpaca6w
-
MD5
c3b0b10224fd44ecc70cff511a90ce77
-
SHA1
35d4db779b99ba8ede734db025ede6daf15f52ed
-
SHA256
91012bc5375a1637666afa144eaecd012c700d73edfae617a5ccddcfaf5b6480
-
SHA512
9f271ab4ba8d1e0527b8a52e7a61f136cb2d0bbed5622318ae53301dba61d3502d03e937aea8bc5ad9b4ffb23faec4c60bc58adb8488ad6f1f57cea1e951889b
-
SSDEEP
3072:z47excGxFLPkH9SnbZDaKag1F0JYEZtpAhS:z+eGYtPk0Z+Q1+ahS
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-PHOTO.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
GOLAYA-PHOTO.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
GOLAYA-PHOTO.exe
-
Size
149KB
-
MD5
13135ec7bee7db877b3654059374ebde
-
SHA1
f3f3a8c6b395211ebdbb2a73769e21c401d34e0c
-
SHA256
7dbe9bdea098a5cb0608135c1705d2aa2e080ebc4146a02001a793ff0970252a
-
SHA512
3f7eb418322b1abbe60b2fa6845ffb3e530808739b0dc542707c713f83bc4b02a4a1568a28e9badeb71bd5512e14a47387abe80b2edf0b440f2c40cc3cc08db8
-
SSDEEP
3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hiqtAhp:AbXE9OiTGfhEClq9QtAhp
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-