Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
091d95be1fbc14129a82b915930bb5bf_JaffaCakes118
-
Size
122KB
-
Sample
241002-f7xpqstblc
-
MD5
091d95be1fbc14129a82b915930bb5bf
-
SHA1
34ec3f25cd92b85340d82614bdfa9392b426fe79
-
SHA256
f1b0197cc55e90b0839637484e918e53d6a67f2500b48b28970af3d78a68fc29
-
SHA512
2e446d2395dbcb91ae6c3260d94639b9e8555650822950c221bddb9b82d858721d4aea13df1eb67c788f510a135281900ecacee6bf50354f0d85db85d030209a
-
SSDEEP
3072:pnHXMpxcGxFyhQ0bOqYNnLK6q1b1ibtCLQdSf2E0JU4ZC:1HmGY/o09tgaKQdSqs
Static task
static1
Behavioral task
behavioral1
Sample
GOLAYA-SEXY.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
GOLAYA-SEXY.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
GOLAYA-SEXY.exe
-
Size
238KB
-
MD5
2ca498cc00b0c5baec004b731621c97d
-
SHA1
41d2d779185cd6274ad1fffecabbbec1d781fd42
-
SHA256
400b70f625095ce4995eb1e8188e319572abd8a67dacc3b1567641c039dbebf0
-
SHA512
173830127c25ee0bb1296943930eac3a49da174ad18725f293d46922bac224e0200cfa17a6c5226379bac89d1e5980c7549687b023c4bf92c9f45ec6d5e6538c
-
SSDEEP
3072:VBAp5XhKpN4eOyVTGfhEClj8jTk+0hNq1dgshuk+Cgw5CKHm:wbXE9OiTGfhEClq9UqTaJJUm
Score8/10-
Blocklisted process makes network request
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-