Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

GOLAYA-SEXY.exe

windows7-x64

8

GOLAYA-SEXY.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    091d95be1fbc14129a82b915930bb5bf_JaffaCakes118

  • Size

    122KB

  • Sample

    241002-f7xpqstblc

  • MD5

    091d95be1fbc14129a82b915930bb5bf

  • SHA1

    34ec3f25cd92b85340d82614bdfa9392b426fe79

  • SHA256

    f1b0197cc55e90b0839637484e918e53d6a67f2500b48b28970af3d78a68fc29

  • SHA512

    2e446d2395dbcb91ae6c3260d94639b9e8555650822950c221bddb9b82d858721d4aea13df1eb67c788f510a135281900ecacee6bf50354f0d85db85d030209a

  • SSDEEP

    3072:pnHXMpxcGxFyhQ0bOqYNnLK6q1b1ibtCLQdSf2E0JU4ZC:1HmGY/o09tgaKQdSqs

Score
8/10
discovery

Malware Config

Targets

    • Target

      GOLAYA-SEXY.exe

    • Size

      238KB

    • MD5

      2ca498cc00b0c5baec004b731621c97d

    • SHA1

      41d2d779185cd6274ad1fffecabbbec1d781fd42

    • SHA256

      400b70f625095ce4995eb1e8188e319572abd8a67dacc3b1567641c039dbebf0

    • SHA512

      173830127c25ee0bb1296943930eac3a49da174ad18725f293d46922bac224e0200cfa17a6c5226379bac89d1e5980c7549687b023c4bf92c9f45ec6d5e6538c

    • SSDEEP

      3072:VBAp5XhKpN4eOyVTGfhEClj8jTk+0hNq1dgshuk+Cgw5CKHm:wbXE9OiTGfhEClq9UqTaJJUm

    Score
    8/10
    discovery

    • Blocklisted process makes network request

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks