General
-
Target
Seven.zip
-
Size
956KB
-
Sample
240427-ct8y3ahb45
-
MD5
6af1cef1ce33ffe41aa0a077c312dcc4
-
SHA1
96a0811dedb4c28ebc8534c0bc63ffedbdb51d71
-
SHA256
c558746f07da8b5eadea18f59648ff7c44ef3577b501f596b9ec595d87aa93ef
-
SHA512
b1e22402288face39909d8b27f0bab67c39b8832ca82ff90bf23a66446458feb6fcd722e35ee936280c3a1ea56f849af84d3bd8d0dfe06f42109f6de5440d8c2
-
SSDEEP
24576:WG1ssXiLQ6Ji1AqjxLlqubQ0TewnC/3N8Yk:WTU62AqTfbQwewCfE
Static task
static1
Behavioral task
behavioral1
Sample
Seven.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral2
Sample
Seven.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
Seven.dll
-
Size
893KB
-
MD5
37549d50c3c4a23686ce54c51687dc14
-
SHA1
189397669659d29548e2250478e79005a8e9f1ab
-
SHA256
13df963698b569539fd082df0dbbbdb0e8329d0f1cf37284176f19a6af07dd43
-
SHA512
5401335422ed4d3f606f4c99956a3906b7be583dbeb31e755b2c280a4be10d8389b9e59ef1908a1e5ab1676515ee459052f0db6a82e9e2d02b19b841c408366e
-
SSDEEP
12288:+1Kka1CNarMDJmEQOiiSGit4qjVLlByu/05SBgENNAIw8tEMycIx+S3cOGulm+G:EAiJ7QOvit4qjVLl4u/m0NYc/0V3FG
Score1/10 -
-
-
Target
Seven.exe
-
Size
139KB
-
MD5
350273e0d2e8a9ba5e37b791016112a0
-
SHA1
5bfb616dd46f67d1dcbbff55ca5917ffc1ec8b71
-
SHA256
27297bf8139bea755e9297e7e1489d827d1ee09a8e1d94a3ef96a2edb2de61ba
-
SHA512
b1e768524b4e840bd5f4163205122dd1725583245d8bfd5cbd89eb21a5fb9d33aff1b7b0ca42132b7dae469e025068ae663b3b02ad59927a558dc340141ec91b
-
SSDEEP
3072:miS4omp03WQthI/9S3BZi08iRQ1G78IVn27bSfcJd8ltw:miS4ompB9S3BZi0a1G78IVhcTct
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-