General
-
Target
Seven.zip
-
Size
1.1MB
-
Sample
240428-kk1kbscb3v
-
MD5
6fd052241f7fd241c3b1f80044d3e233
-
SHA1
6d59e9bf8d8e04ea09fee3e910b29944ec3549eb
-
SHA256
4ecc6606ef0b457a408e77540dec6caf76dc4c2c91759d877e31db2418ecadd5
-
SHA512
68871dcc32c6acf4e09d4cb4bcdd1719a17949c8098ed259b4fb5b5bfb5d2645849e2c8ac9f81d4a2e88124bbff85e688485ecbb705f012383efb723abb23cee
-
SSDEEP
24576:rSdOz7fW1Kit5uMSWTmqD/Fl4kd0fPco1Z1GFVAm8o7sL80B:rzfW1TCKmqvtd03cof1YVZsT
Static task
static1
Behavioral task
behavioral1
Sample
Seven.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
Seven.dll
-
Size
1.0MB
-
MD5
c3914eb802da6e356921782b49fb881c
-
SHA1
e0c93193d42b0d9cc90bb00a0f275d18188cb8ec
-
SHA256
81bb062f4ecded142058ff97d111a869ea8836041d084addc3e6227d57a74d8a
-
SHA512
5d54bc62686e47a380efe77309f9d594e76d6d5bdaf7ead33b94d93e2e324dbf4e79ad220198161e0fe9f74a828abdcb8755c296f5d394fdd9da240d176cab83
-
SSDEEP
24576:PAiJp30zOil50E0Wb8qj/Jlikdud9yadXv0FRAmm6xs:j30zP2+8qDHduDya9vKRvs
Score1/10 -
-
-
Target
Seven.exe
-
Size
139KB
-
MD5
6503f847c3281ff85b304fc674b62580
-
SHA1
947536e0741c085f37557b7328b067ef97cb1a61
-
SHA256
afd7657f941024ef69ca34d1e61e640c5523b19b0fad4dcb1c9f1b01a6fa166f
-
SHA512
abc3b32a1cd7d0a60dd7354a9fcdff0bc37ec8a20bb2a8258353716d820f62d343c6ba9385ba893be0cca981bbb9ab4e189ccfeee6dd77cc0dc723e975532174
-
SSDEEP
3072:miS4omp03WQthI/9S3BZi08iRQ1G78IVn27bSfcJd8lto:miS4ompB9S3BZi0a1G78IVhcTct
-
Blocks application from running via registry modification
Adds application to list of disallowed applications.
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Disables cmd.exe use via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Create or Modify System Process
1Windows Service
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1