General
-
Target
Seven.zip
-
Size
1.1MB
-
Sample
240428-be78jsch2t
-
MD5
3fe66b2cdbae9ba61a522546f6046bbb
-
SHA1
c5011ae06b87a2b7fed452ed8e5ab25d0896548c
-
SHA256
8fc05efd03802e71e066a82eeea2cfcebd3b63bfbaeeeb72b05c155e741f02df
-
SHA512
61cb60d8cc5581fd54a9f9320dc852b7195367f388197f765b697eeae7f486d127c1f2b0577d4fc93ea8d172cff901f35a5074f227eb9bebb2c252a9456635c5
-
SSDEEP
24576:XXiASQgN8E2Sgb92iJ5ShhnWtKq575loudeohEi9SV5N4YBQCvU/o1s:XXBZL9TYlgKq1DdetASLKLgm
Static task
static1
Behavioral task
behavioral1
Sample
Seven.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
Seven.dll
-
Size
1.0MB
-
MD5
c89d50f8b65aa6544e26e3ac6f417ac8
-
SHA1
2c26f42230bba133ab961555dd8ec5c7283e923c
-
SHA256
eb36275449d517adfdd44bb563d27847cc3a1f9903abfe9451d0c8278321a47c
-
SHA512
3b802ebd1e60a0cf5f2020ab7f02335ad59e1ae344d5206c7764f14d64ac37b92534fa78748e3c7006e4f7b1289bf2ce8e94b1e3b6b65cf7b68417b35a1e3192
-
SSDEEP
24576:DAiJqEAwab98iF5IhDDWDwqj7tloudYchE0TCX3J+Al8algr:w99dCXewqrDdY54CHg
Score1/10 -
-
-
Target
Seven.exe
-
Size
139KB
-
MD5
6503f847c3281ff85b304fc674b62580
-
SHA1
947536e0741c085f37557b7328b067ef97cb1a61
-
SHA256
afd7657f941024ef69ca34d1e61e640c5523b19b0fad4dcb1c9f1b01a6fa166f
-
SHA512
abc3b32a1cd7d0a60dd7354a9fcdff0bc37ec8a20bb2a8258353716d820f62d343c6ba9385ba893be0cca981bbb9ab4e189ccfeee6dd77cc0dc723e975532174
-
SSDEEP
3072:miS4omp03WQthI/9S3BZi08iRQ1G78IVn27bSfcJd8lto:miS4ompB9S3BZi0a1G78IVhcTct
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Disables cmd.exe use via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1