General

  • Target

    Seven.zip

  • Size

    956KB

  • Sample

    240427-ct8y3ahb45

  • MD5

    6af1cef1ce33ffe41aa0a077c312dcc4

  • SHA1

    96a0811dedb4c28ebc8534c0bc63ffedbdb51d71

  • SHA256

    c558746f07da8b5eadea18f59648ff7c44ef3577b501f596b9ec595d87aa93ef

  • SHA512

    b1e22402288face39909d8b27f0bab67c39b8832ca82ff90bf23a66446458feb6fcd722e35ee936280c3a1ea56f849af84d3bd8d0dfe06f42109f6de5440d8c2

  • SSDEEP

    24576:WG1ssXiLQ6Ji1AqjxLlqubQ0TewnC/3N8Yk:WTU62AqTfbQwewCfE

Score
7/10

Malware Config

Targets

    • Target

      Seven.dll

    • Size

      893KB

    • MD5

      37549d50c3c4a23686ce54c51687dc14

    • SHA1

      189397669659d29548e2250478e79005a8e9f1ab

    • SHA256

      13df963698b569539fd082df0dbbbdb0e8329d0f1cf37284176f19a6af07dd43

    • SHA512

      5401335422ed4d3f606f4c99956a3906b7be583dbeb31e755b2c280a4be10d8389b9e59ef1908a1e5ab1676515ee459052f0db6a82e9e2d02b19b841c408366e

    • SSDEEP

      12288:+1Kka1CNarMDJmEQOiiSGit4qjVLlByu/05SBgENNAIw8tEMycIx+S3cOGulm+G:EAiJ7QOvit4qjVLl4u/m0NYc/0V3FG

    Score
    1/10
    • Target

      Seven.exe

    • Size

      139KB

    • MD5

      350273e0d2e8a9ba5e37b791016112a0

    • SHA1

      5bfb616dd46f67d1dcbbff55ca5917ffc1ec8b71

    • SHA256

      27297bf8139bea755e9297e7e1489d827d1ee09a8e1d94a3ef96a2edb2de61ba

    • SHA512

      b1e768524b4e840bd5f4163205122dd1725583245d8bfd5cbd89eb21a5fb9d33aff1b7b0ca42132b7dae469e025068ae663b3b02ad59927a558dc340141ec91b

    • SSDEEP

      3072:miS4omp03WQthI/9S3BZi08iRQ1G78IVn27bSfcJd8ltw:miS4ompB9S3BZi0a1G78IVhcTct

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks