General
-
Target
Seven.zip
-
Size
1.1MB
-
Sample
240428-bqb99adb9s
-
MD5
53c0c08f5ddca4bd8ad006d62dde1c2d
-
SHA1
d0ad078fcec029a412a0eb96663d2373b84395a2
-
SHA256
4d9d50f47898d76d5ed5449c744f35b557677e44c5d82c7432393101b40ad9cc
-
SHA512
fb2baee855cfc9ea575a338d62edf109fcf1aabc1ffc47753b9c53395634523d63416a9150855222c926d5916e1acbf341c7d4fea4c419652824bbe3aa102550
-
SSDEEP
24576:XXqy/4R0HE4CCb9miX5ghnvWV6qJ7DlKudQkhEQNcV9Low/O2byZO:XXqy/jV99qvI6qn9dQhScfUi
Static task
static1
Behavioral task
behavioral1
Sample
Seven.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
Seven.dll
-
Size
1.0MB
-
MD5
5ede7c5c09c58dd2b55c153a058c8746
-
SHA1
4f147e97e311084917164b4818f811b4cfa0fad6
-
SHA256
f2e78f66ffaf1dcaf7f8d8411a8f0223b059a18e7923cd44dad39960e3c5a9fe
-
SHA512
7048366a680ae8fc2878b4ccdb8078b0f3bb1a5ef5e3388a6d0f1ebd63ec26f4a958552401f5feed31bbee3cddd965cefa581e77814b2dfad0d76e2c652f4f9a
-
SSDEEP
24576:uAiJqEAwab98iF5IhDDWDwqj7tloudYchE0TCX3J+Al8algr:n99dCXewqrDdY54CHg
Score1/10 -
-
-
Target
Seven.exe
-
Size
139KB
-
MD5
6503f847c3281ff85b304fc674b62580
-
SHA1
947536e0741c085f37557b7328b067ef97cb1a61
-
SHA256
afd7657f941024ef69ca34d1e61e640c5523b19b0fad4dcb1c9f1b01a6fa166f
-
SHA512
abc3b32a1cd7d0a60dd7354a9fcdff0bc37ec8a20bb2a8258353716d820f62d343c6ba9385ba893be0cca981bbb9ab4e189ccfeee6dd77cc0dc723e975532174
-
SSDEEP
3072:miS4omp03WQthI/9S3BZi08iRQ1G78IVn27bSfcJd8lto:miS4ompB9S3BZi0a1G78IVhcTct
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Disables cmd.exe use via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1