Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
02f54d6735912c5a5d950913b47a8fae_JaffaCakes118
-
Size
124KB
-
Sample
240930-yajqqawaqb
-
MD5
02f54d6735912c5a5d950913b47a8fae
-
SHA1
6e5fa63825220c857a842fc7c30401868b550dc7
-
SHA256
cbf439d2a7f898ce241df8892305971ecef2bde96a96bcc58afe17b383ec553c
-
SHA512
5e784521deea587f6ffab3964ecb2915b908371dcd820ff1811bd98a222e64d53bb5ea2f18ce6a666d5af78391863b8e8e5f6b0b007a664903ab50e759960038
-
SSDEEP
3072:wnHXMpxcGxFyhQ0bOqYJrC06GdkEfj+BcB9AHDMVTCjtv:oHmGY/o0JrV6GJ+q98DMxsv
Static task
static1
Behavioral task
behavioral1
Sample
RUSSKAYA-GOLAYA.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
RUSSKAYA-GOLAYA.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
RUSSKAYA-GOLAYA.exe
-
Size
239KB
-
MD5
6839c4c1e533bdef312fa9501b7cd622
-
SHA1
0a4a288e686a64c0d926e5d5c7ddd46ec7eeeaa1
-
SHA256
5b40e9c2a5bbd190d09eade750b1ce1a48887f6822a3e8a4cf3f927c38088982
-
SHA512
d0cafe97a7ab0444424d88d6fddbe2bb0bc9d33abaaeec21101388982d40728d5114d30d1d9b3f7b5d0ea77cbfc6f8067256d4cd7613d14de74ccd196a1dd954
-
SSDEEP
3072:MBAp5XhKpN4eOyVTGfhEClj8jTk+0hYoO/MgjqEWBz+Cgw5CKHy:7bXE9OiTGfhEClq95/MgXJJUy
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-