Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

GOLAYA-BABE.exe

windows7-x64

8

GOLAYA-BABE.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe24a68a210ee75441277f2442b36cf9_JaffaCakes118

  • Size

    87KB

  • Sample

    240421-b689xsfh82

  • MD5

    fe24a68a210ee75441277f2442b36cf9

  • SHA1

    317fc750ae076c82fa7997a1e6931f7d06cd6a7a

  • SHA256

    2604a003d3363330d9cd0721cec45c8164c219872f1ecba8405818bea95c0b59

  • SHA512

    76265e0ab3360af9659b6efbfda286d1979c561643abb52193a64f199ee658825d2512cbae0cb536f0a1fa577113bb17602575ded991ff69a2babd8c75ea4c11

  • SSDEEP

    1536:Uvg1WKQmK74VzprUxe7kvLSPkIJNE9sq0Qs07tta3wcpFFtSJJr5pNLKA:UvgEL7Yo4PkH9sIbr+wcJtSJTpNLKA

Score
8/10

Malware Config

Targets

    • Target

      GOLAYA-BABE.exe

    • Size

      180KB

    • MD5

      3e080ab7ed40be06a0da9f17c44bd6ec

    • SHA1

      8f4dd15b0cb7fefa1d5f64e5dfb786a7a1dc05f8

    • SHA256

      b569cbf09e89d5a87e21892099a4f6e76dcaad568af02793fa3149fc6e5e461b

    • SHA512

      7e3b54939793fa1554759d8c8ac93696fe1c8fa5ff0423457ba2cced679ff13a800d5f3cff6ec8e71cc504e910b2766b486b98b47575c6abb83d6ef885d03fed

    • SSDEEP

      3072:vBAp5XhKpN4eOyVTGfhEClj8jTk+0hgVL8ON:ybXE9OiTGfhEClq9zJ

    Score
    8/10

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks