Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
c74c7f83ffe1529b1dedb4f1d5fc74a1
-
Size
98KB
-
Sample
240314-bh331aeh51
-
MD5
c74c7f83ffe1529b1dedb4f1d5fc74a1
-
SHA1
ddd0a1ab7aad741a4b1b3d076092ba790fa5e6ab
-
SHA256
bf97000b398cdb8f6aadd90f8daa61ad1bbfb17279aeec3d66b56333d2584cf3
-
SHA512
07512f46ca8de62e9ba11e7e17585ddd214573af008954814cb6304abfd4ce83cbd103ce5b971d6d94017e51b8cf5290a0bcd07a35b5e780c0108419ab592581
-
SSDEEP
3072:D47excGxFLPkH9SnbZDaKag1F0JYEZtpAhv:D+eGYtPk0Z+Q1+ahv
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-DEVOCHKA.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
GOLAYA-DEVOCHKA.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
GOLAYA-DEVOCHKA.exe
-
Size
149KB
-
MD5
13135ec7bee7db877b3654059374ebde
-
SHA1
f3f3a8c6b395211ebdbb2a73769e21c401d34e0c
-
SHA256
7dbe9bdea098a5cb0608135c1705d2aa2e080ebc4146a02001a793ff0970252a
-
SHA512
3f7eb418322b1abbe60b2fa6845ffb3e530808739b0dc542707c713f83bc4b02a4a1568a28e9badeb71bd5512e14a47387abe80b2edf0b440f2c40cc3cc08db8
-
SSDEEP
3072:lBAp5XhKpN4eOyVTGfhEClj8jTk+0hiqtAhp:AbXE9OiTGfhEClq9QtAhp
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-