General
-
Target
Seven.zip
-
Size
1.1MB
-
Sample
240428-a8k5facf4v
-
MD5
2fc4690fdcb530c84950b9c6b2ffbebd
-
SHA1
4c338c1a343df2d7b33ecc6d095ec11eb53129b3
-
SHA256
bff1a141d0c9ab35aad7033046b505a97eb6778cfe882ff39caf37a8c5e55018
-
SHA512
95968c04b1e66a68d5a38256870eaf18d7834c7df1fecb8c4b7ea57d731a9718bd1ed2fa5aa0c7d136c9140c7cdbbec56d3d70b54d51e81606010e7d8bbf812a
-
SSDEEP
24576:XhkUEpcEouQb9QiB5ChffWp4qN7BlyudSmhE0XMnP7C0XGUPDFVy:Xhkmz9ZoXU4qh1dSzcMPOB
Static task
static1
Behavioral task
behavioral1
Sample
Seven.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
Seven.dll
-
Size
1.0MB
-
MD5
edbacfbf4d63f6c309d676d6a2800887
-
SHA1
676e239d4a12b4bde480646376a40352dc5c0e8c
-
SHA256
734fd19c807a2e78b7687e21337d0d70f91d7eb1b46ef8a6029e4267d071244c
-
SHA512
4c744f297bedd105874dd00c3c34be7aa32d1cf3ba977dca9ac3e8aaf9c78aa1f533a3e7126f91b1f2c7bd131e08acc947cc0f6b08bb62abc3e2c304e35acb57
-
SSDEEP
24576:bAiJqEAwab98iF5IhDDWDwqj7tloudYchE0TCX3J+Al8algr:I99dCXewqrDdY54CHg
Score1/10 -
-
-
Target
Seven.exe
-
Size
139KB
-
MD5
6503f847c3281ff85b304fc674b62580
-
SHA1
947536e0741c085f37557b7328b067ef97cb1a61
-
SHA256
afd7657f941024ef69ca34d1e61e640c5523b19b0fad4dcb1c9f1b01a6fa166f
-
SHA512
abc3b32a1cd7d0a60dd7354a9fcdff0bc37ec8a20bb2a8258353716d820f62d343c6ba9385ba893be0cca981bbb9ab4e189ccfeee6dd77cc0dc723e975532174
-
SSDEEP
3072:miS4omp03WQthI/9S3BZi08iRQ1G78IVn27bSfcJd8lto:miS4ompB9S3BZi0a1G78IVhcTct
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Disables cmd.exe use via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1