General
-
Target
Seven.zip
-
Size
1.1MB
-
Sample
240428-brerrsch54
-
MD5
a0f10dff462a59682c46c5ed2066f217
-
SHA1
fe6c96750122f0bedae3df244d6f07fb954b4363
-
SHA256
c000d1a6a4c3d91209d60effc0d92019f0baa253ae58ef97f40aff92e57e8480
-
SHA512
a0e869994ab4dae49b20b42944316124b87c827c2dad33dcf0cb71e13f20bc36aadd3efa1a44414022005ef1e509d531ff573cb335029078096f608d2d09c7dc
-
SSDEEP
24576:X2C37gRoGEm2kb9qiL5KhxjWRkqP7zlQud6ghEyh47Fp6of0g74gk:X13fM/9NgZokq97d6l04Bw9
Static task
static1
Behavioral task
behavioral1
Sample
Seven.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
Seven.dll
-
Size
1.0MB
-
MD5
32629b5b0b6b321ed57a6a99928dc433
-
SHA1
b7560f4de30a2fd7fffc905b027152a528e0b392
-
SHA256
67a6feb817dfd423616111d28bfc25146a79ec098825f597ce40698f8ab63697
-
SHA512
200997a52bbd66e4c1c50728362cd54bcbc975a656be076e89d0ebe63a7eff3e3c6a25b03980097bc74f95bc9f7fec63eb985b309b52f492505242471524cb42
-
SSDEEP
24576:0AiJqEAwab98iF5IhDDWDwqj7tloudYchE0TCX3J+Al8algrM:p99dCXewqrDdY54CHg
Score1/10 -
-
-
Target
Seven.exe
-
Size
139KB
-
MD5
6503f847c3281ff85b304fc674b62580
-
SHA1
947536e0741c085f37557b7328b067ef97cb1a61
-
SHA256
afd7657f941024ef69ca34d1e61e640c5523b19b0fad4dcb1c9f1b01a6fa166f
-
SHA512
abc3b32a1cd7d0a60dd7354a9fcdff0bc37ec8a20bb2a8258353716d820f62d343c6ba9385ba893be0cca981bbb9ab4e189ccfeee6dd77cc0dc723e975532174
-
SSDEEP
3072:miS4omp03WQthI/9S3BZi08iRQ1G78IVn27bSfcJd8lto:miS4ompB9S3BZi0a1G78IVhcTct
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Disables cmd.exe use via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1