Overview
overview
7Static
static
3SevenCord-...2).exe
windows10-2004-x64
7SevenCord-...2).exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3LICENSES.c...m.html
windows10-2004-x64
3LICENSES.c...m.html
windows11-ltsc_2024-x64
3SevenCord.exe
windows10-2004-x64
7SevenCord.exe
windows11-ltsc_2024-x64
1d3dcompiler_47.dll
windows10-2004-x64
1ffmpeg.dll
windows10-2004-x64
1ffmpeg.dll
windows11-ltsc_2024-x64
1libEGL.dll
windows10-2004-x64
1libEGL.dll
windows11-ltsc_2024-x64
1libGLESv2.dll
windows10-2004-x64
1libGLESv2.dll
windows11-ltsc_2024-x64
1resources/app.js
windows10-2004-x64
3resources/app.js
windows11-ltsc_2024-x64
3resources/...her.js
windows10-2004-x64
3resources/...her.js
windows11-ltsc_2024-x64
3resources/...her.js
windows10-2004-x64
3resources/...her.js
windows11-ltsc_2024-x64
3resources/...oad.js
windows10-2004-x64
3resources/...oad.js
windows11-ltsc_2024-x64
3resources/...oad.js
windows10-2004-x64
3resources/...oad.js
windows11-ltsc_2024-x64
3resources/...rer.js
windows10-2004-x64
3resources/...rer.js
windows11-ltsc_2024-x64
3resources/...rer.js
windows10-2004-x64
3resources/...rer.js
windows11-ltsc_2024-x64
3resources/...her.js
windows10-2004-x64
3General
- Target SevenCord-Installer(2).exe
- Size 52.8MB
- Sample260903-tk427abp81
- SHA256 41f47088489c7fd7f224f5f6017a08f8df93e1867a712e04da9ed146b310ecf8
- MD5 1402bd847d09f9d7ff702b8b7377c6bb
- SHA1 6a095cc301ac2d6d82740cdd51c5cfae0a62f1c6
- SHA512 05ca5a3175b0bfbfdf384272942ca87364d5cf2bd3dc46f7297ed9217098ca9f921f11360497284d3a6104deba8ee190677fef385e6fe9db17b3675cfb9e5a64
- SSDEEP 1572864:KR+qvl5Ff9IfaFOJx/98wqpg9sbhA2w3ZZ7GGJ0Qz0Dy7:KHl5h9IfaUD8jjlxC0GKQz0G7
- TLSH T176C733C36142A375E4D793BC887390A18585CEF23DBEBEADDF971312A988B4F14086D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SevenCord-Installer(2).exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SevenCord-Installer(2).exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
LICENSES.chromium.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
LICENSES.chromium.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
SevenCord.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
SevenCord.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
d3dcompiler_47.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
ffmpeg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral13
Sample
ffmpeg.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral14
Sample
libEGL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral15
Sample
libEGL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral16
Sample
libGLESv2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral17
Sample
libGLESv2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral18
Sample
resources/app.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
resources/app.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral20
Sample
resources/assets/dist/patcher.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
resources/assets/dist/patcher.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral22
Sample
resources/assets/dist/patcher.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
resources/assets/dist/patcher.js
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral24
Sample
resources/assets/dist/preload.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
resources/assets/dist/preload.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral26
Sample
resources/assets/dist/preload.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
resources/assets/dist/preload.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral28
Sample
resources/assets/dist/renderer.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
resources/assets/dist/renderer.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral30
Sample
resources/assets/dist/renderer.js
Resource
win10v2004-20260513-en
Behavioral task
behavioral31
Sample
resources/assets/dist/renderer.js
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral32
Sample
resources/dist/patcher.js
Resource
win10v2004-20260513-en
Malware Config
Targets
-
- Target SevenCord-Installer(2).exe
- Size 52.8MB
- SHA256 41f47088489c7fd7f224f5f6017a08f8df93e1867a712e04da9ed146b310ecf8
- MD5 1402bd847d09f9d7ff702b8b7377c6bb
- SHA1 6a095cc301ac2d6d82740cdd51c5cfae0a62f1c6
- SHA512 05ca5a3175b0bfbfdf384272942ca87364d5cf2bd3dc46f7297ed9217098ca9f921f11360497284d3a6104deba8ee190677fef385e6fe9db17b3675cfb9e5a64
- SSDEEP 1572864:KR+qvl5Ff9IfaFOJx/98wqpg9sbhA2w3ZZ7GGJ0Qz0Dy7:KHl5h9IfaUD8jjlxC0GKQz0G7
- TLSH T176C733C36142A375E4D793BC887390A18585CEF23DBEBEADDF971312A988B4F14086D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
- Target $PLUGINSDIR/StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target LICENSES.chromium.html
- Size 5.1MB
- SHA256 fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585
- MD5 6b84319ee8a0a0af690273d3d2dcbaf4
- SHA1 857ca353e0582d100dcbc6cb6761bb4430d0cb90
- SHA512 26f9842bfdb429ef132cc1a930da9187071a339927eda402e8d54b5eb9e03067612cdadc3a2dad3d0977f8e6af18c05eab6ac91720221c6a0104f96638f85a8a
- SSDEEP 24576:yd97B+mnLiLsrDy2VrErjKCqzkU98wwg3QeXuh:0P+mLAqHBCuRoeS
- TLSH T1D046D66BBB49037316F282626B4AA4CAF31E903F375A1514345CD15C2B7BA2483FF69D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target SevenCord.exe
- Size 129.8MB
- SHA256 66d18c382ebab8a20dafa54d89d3ce106560e76830cde9c5fff773cc28cd51cf
- MD5 1c19af5b10d3aedd8a4459481df74558
- SHA1 f848c87e2f7db3e8b3dd6c590ef2bfbb0aa151d0
- SHA512 b0775e85e6e6e79209e9263e6c3608516bc65b74033fb1d0aca6476c6f4861d962d23f060a5646dd3ff54ec706647bca62f6dfbb6309f81b18b0e9c288c244a6
- SSDEEP 1572864:rmYWQRWtJ65M7a2iu4Rywh9hJyO9N+oJOTU8f/kmgZ2sI:a4M7a2H4Ryu+dNgI
- TLSH T14D587C03E29610D9F09DD1B59B468636DEB2BC454739A2DF2690271A2F7BFE0273DB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target d3dcompiler_47.dll
- Size 4.3MB
- SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
- MD5 7641e39b7da4077084d2afe7c31032e0
- SHA1 2256644f69435ff2fee76deb04d918083960d1eb
- SHA512 8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5
- SSDEEP 49152:aYlc/220PPiMLKam+VMrLi21f4i3jn5ZO3XUDmOZQwVd2uQpN3WsGVUWd55i/jrs:a6KD2Mrdaix4NQnLt
- TLSH T16F267D5677A840A9C27BC178CA574313EBB1781403349BEF55A0C665EF33BD26E3A728
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target ffmpeg.dll
- Size 2.6MB
- SHA256 39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08
- MD5 7c3c780de9ae5cc4abeccbd7cb6b367b
- SHA1 bda27b3c0b1ec023e2a0a97099a84b10e04cb135
- SHA512 80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c
- SSDEEP 49152:8MnbcrH9v7eCZPxX+qzohT99hDoapghnshy43yBcxnyKbZtjB0HVEMGJSj/8NOv:dCZpX+q27saesDSjbv
- TLSH T17CC59C17F6A644EDD02DC57483AF9233F93078454724A6EF2A809A252F7BFD06A7E314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target libEGL.dll
- Size 429KB
- SHA256 23046e7fe2bbf76ee2c5596b6beac723ad465fdbaa44266486102cdb292148a1
- MD5 b3017453d487a7d33445c1d2d9b9bc13
- SHA1 7e643ccb8984a4a92dd439eeb4bdaaeb62bd8862
- SHA512 fd583f4b95aa974d72628bcc548feb22bc86c5ab0fd1536995bd796e28422f56e6799d60e2c3bef9aed9a1080eaf12338a3b29b8c3d40ba5166030a219572baf
- SSDEEP 6144:67Udu1o3YnElXvzYhRk9o+3Re3wpcOQy5n+t7dPs:wUdu1NElX7QR2osJ5+XP
- TLSH T1B2947D15F79048B9D076C078CA634642DE72B8DA0F64EADF139492692F7BBE45F39320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target libGLESv2.dll
- Size 7.6MB
- SHA256 dd74029716da56a0e4b64bc5cea0c169e1c4b31143ff39213d3c544792e8f2b9
- MD5 dd8d815769cbf46af41a41931e9b4572
- SHA1 f242fcc4cfd5030f3f543c22f141185cd86e7142
- SHA512 69a12f862157746ffc27b637941261a0c5c494175c3e674c7de4d0c4452a5b9358735944e8e0568b7279a7791cf178c9b1afd5ea4a781e93f28cd775a0a6096f
- SSDEEP 98304:p5a6GJCIf2Knqdu5iIBIcbWwYSqARSHoDNSv:pKIwBqARSH
- TLSH T1FC866C07E2A040DDE00DC1B9875BB222EA31BC491B64B6DF269477112FB7FE06B7A754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target resources/app.asar
- Size 1.1MB
- SHA256 914b7543293ea55d53e0cc4a6f36a98358a945ebdd3e5c7231c47267c607fb22
- MD5 9050fede45cb60d7a0566cfc50a86f9c
- SHA1 79760185dc95d15ed4ea4356259d238e0f85228a
- SHA512 e5f36d78cafe69d3418a5700f4768e4f7d57bd0fc18556b4ea05ab9c31ba6aa3d0ec870a703a10c182a1702a8cdba8cf2d0ae9a634ade210a7ed147cdbf25787
- SSDEEP 12288:m5/Hnms0xsrDIFpVpZ3uQqPjSFxfPfViQtdYCOx:m5/Hwrltdjs
- TLSH T18C453BBB77B29636169616EA0BDF0184A1384116A911C858F81CF0CC37B5F2AF1F9DED
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/assets/dist/patcher.js
- Size 457KB
- SHA256 746bf3ee9c0b4b140121041e4dbd6b66c6811aa223d57b7c32b90e806b1b9e5f
- MD5 e201d0503af9f69faf4e1acef11c379f
- SHA1 26b6c0cbc27f1b1ac8b9d4a4713b97ae9518696d
- SHA512 17e9b84e244a91ae473b8ec849a53956ea79f0a360df713216d029fefdc3ef007e64a200584ea83794fada0980da0e625ab97165214b2b5a7fcb40733d3e2d82
- SSDEEP 6144:21RxFQLrUwqmoTS0Ly5zSi3GuX6EMi8d/Ctsu7eo4vFno5Fgd3Xl9bgYmNY/n6:21RkCTfe5/GuX6U8BCV7snoEd3Xl9bhA
- TLSH T190A45CDA73E6B17643EA51E9506B4502F335C965040C802CF2ACE9DF7FA984891BBFB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/assets/dist/patcher.js.map
- Size 1.8MB
- SHA256 098af71b7b553011b0e0e964079c2fbaf8b0cf4594630fb2ac1f368836e5eb32
- MD5 cadf726b546544908898df7bb8c5c2dc
- SHA1 28f30e5e91b0ddaa3dbd1fb347ee822fe4cae2bd
- SHA512 43928a35c794b5a3ee675079c58432983397c72ffe6d610a223720e4f40d94973664d0b54dd9a33e47a6062b666d6d7455da9d1c4c449b669199e3f0412cc79d
- SSDEEP 49152:b0js6FcYVVGzL98cdYFvhUcxJsIj6pX0ji45:whUQ6SjT
- TLSH T1CC95F72632A7E53707572BFB6EDA0064FA24B14826119114389CD26D738BF34F2B5EF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/assets/dist/preload.js
- Size 5KB
- SHA256 37ed38a850ec61eb10aec292edbaa38474d2079011fbbef5d0f6be8ac5804e00
- MD5 a52e93242ff190e38328c8776cf6f338
- SHA1 b6ba6440125374ce2d80478fe9e6e3542737f4ae
- SHA512 c1d2e14159cfca31e413327353fe1cf42210f74bc9169852e76e4b1bebd2bac09b6f3ac1989e03c4c508096d460f0358746fc1c6c3b506c3081f6fb29d7c0c37
- SSDEEP 96:hx2oATN5CxFJ8JYPeQVLGaEGMgHPFrxYueuOFV16OmFhylv0i6:KonfJ8cegRtr6/uODAzyih
- TLSH T16BC1B8E92592917DA363316BE54FD58CEA106178650FD074BA4C81713F628147BE2FBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/assets/dist/preload.js.map
- Size 17KB
- SHA256 4e5208251e84fe64405c4542e92f82451aad885c6af85986a0df6e21aac33a4d
- MD5 e4aadbfb0a8a3be0af6e321f80aad0d9
- SHA1 7184201033ba0577ff2eee39575772d6ced1f27a
- SHA512 f29ba4a46501297804b96f64827815956195cda46bf1be5a43938b26289faaa0a54f9ebd5a0aff5e8664686285cf035237384851c323f74d147d9dce54d75821
- SSDEEP 384:iR3zRQaYez92NjSWtHRh3RKHeX1+Ka8Hu5H9RHc6cH/Ht4ZHdtD8feFoGhfVbRoZ:iR3zRQaYzNj9t4IEXKfmjHX2QU96XCCc
- TLSH T1D282A67A3113E637458207D37AA740CAFA25758A362562A07E4C296D23CAF3971F39F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/assets/dist/renderer.js
- Size 2.6MB
- SHA256 c88b8ef969c2ef6c668cb24a3c228f57e588a3006b496ad6f46c11dab73e18c3
- MD5 c74b0c29d401179cbb0e265345264ba1
- SHA1 5e7cd8c6fcc5c99e0c3057dfb645eb000f3ef451
- SHA512 f4079bccd80f8225943f494ebc2540f6385caab73fe063944097002cbaf9a1df3fa0c3a13643e6eee3f3a4708578d4206836dcffe6e4abd509e57b3b2e5af26c
- SSDEEP 49152:rk5v4x6mvI9YREpjlVumdN3TzAEPqqPFFe3N83D:rmury
- TLSH T12DC5D4EAD57A095E1AD53043EA793C8F7454ED81D608C33BECBD6197F280294C3E27A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/assets/dist/renderer.js.map
- Size 5.8MB
- SHA256 f6d5312d746a5e7d385a55246dab73aa4d285f4fdd8406224fdd6b8ac696cd3e
- MD5 4241e1b73f7cb6058fda7721d8f7000c
- SHA1 9b861b5fb2594723322a58873d04be1a642676ab
- SHA512 8f9d4b4cdcf23d764e25f699ab020ad611300bba2020502670ce0f9d5ad28aa22f25f3000182fb4edf8e1d222addbe14c0153f99e255853c411c33b8a37df8da
- SSDEEP 49152:Fj65lfSD0ux6GmVDkqB8DIcBiW41znzG9q182yJeWeKq8K+gSvS1DU7Kz:OfSD029qVt
- TLSH T1AD56B795A027843F16823697EEF61DAD79147084E910C3387DACE12FE386F64F2E1799
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target resources/dist/patcher.js
- Size 457KB
- SHA256 746bf3ee9c0b4b140121041e4dbd6b66c6811aa223d57b7c32b90e806b1b9e5f
- MD5 e201d0503af9f69faf4e1acef11c379f
- SHA1 26b6c0cbc27f1b1ac8b9d4a4713b97ae9518696d
- SHA512 17e9b84e244a91ae473b8ec849a53956ea79f0a360df713216d029fefdc3ef007e64a200584ea83794fada0980da0e625ab97165214b2b5a7fcb40733d3e2d82
- SSDEEP 6144:21RxFQLrUwqmoTS0Ly5zSi3GuX6EMi8d/Ctsu7eo4vFno5Fgd3Xl9bgYmNY/n6:21RkCTfe5/GuX6U8BCV7snoEd3Xl9bhA
- TLSH T190A45CDA73E6B17643EA51E9506B4502F335C965040C802CF2ACE9DF7FA984891BBFB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10