Overview

overview

7

Static

static

3

beetle-cab.cab

windows10-2004-x64

1

beetle-cab/7za.dll

windows10-2004-x64

3

beetle-cab/7za.exe

windows10-2004-x64

1

beetle-cab/7zxa.dll

windows10-2004-x64

3

beetle-cab/arc.7z

windows10-2004-x64

3

beetle-cab/start.cmd

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    beetle-cab.cab

  • Size

    13.1MB

  • Sample

    240615-tgtgaazfkr

  • MD5

    64d612286675052142ea0f1b764fb461

  • SHA1

    c1bf827dd9bff1309cdc014f7c008cdf77532562

  • SHA256

    bf0a5efb3d84fa52938ccf45d84483386606204b4f6473cb9030b53baf7b1ba4

  • SHA512

    3ad54f0d68f2e7b4493f307c2031b4f0b37a9bbb61387f3079b4374fc4c9e8ce346bf5f6dbe40612d8af02acb6aa9aaa29490cdeeb90259b4dda536bb766498e

  • SSDEEP

    393216:ykC5RTCLfUqwxGPPmoDFYJbFFyC1+JdIivLDb15OINzxoNf:yJv6fUqgpJ1+5LDJ5OITef

Score
7/10

Malware Config

Targets

    • Target

      beetle-cab.cab

    • Size

      13.1MB

    • MD5

      64d612286675052142ea0f1b764fb461

    • SHA1

      c1bf827dd9bff1309cdc014f7c008cdf77532562

    • SHA256

      bf0a5efb3d84fa52938ccf45d84483386606204b4f6473cb9030b53baf7b1ba4

    • SHA512

      3ad54f0d68f2e7b4493f307c2031b4f0b37a9bbb61387f3079b4374fc4c9e8ce346bf5f6dbe40612d8af02acb6aa9aaa29490cdeeb90259b4dda536bb766498e

    • SSDEEP

      393216:ykC5RTCLfUqwxGPPmoDFYJbFFyC1+JdIivLDb15OINzxoNf:yJv6fUqgpJ1+5LDJ5OITef

    Score
    1/10
    behavioral1

    • Target

      beetle-cab/7za.dll

    • Size

      272KB

    • MD5

      b54e2dcd1a3d593ca0ae4cb71910710e

    • SHA1

      15ab00317b310a7a535684c7221e0eb6cde68ac2

    • SHA256

      d7f1224cc4afb90af3792dadfdf2f14bad4a19329ee0f3c87c111611aa36b7b1

    • SHA512

      1414fd599095c3afd4faa6cf56e2f00d9db4d80f460457e4e08734ee24ed852f74d5813b4e96091c330ba8dd2f998995233583bbf887eff1c89b924b09a3fcc0

    • SSDEEP

      6144:Ml7K/bZ3Xb4/e4BQSx65Pz6RjVM/oTO+T7KmdCUOHn:MRK/bi/ecx6gJVMgTOE7KAQ

    Score
    3/10
    behavioral2

    • Target

      beetle-cab/7za.exe

    • Size

      796KB

    • MD5

      90aac6489f6b226bf7dc1adabfdb1259

    • SHA1

      c90c47b717b776922cdd09758d2b4212d9ae4911

    • SHA256

      ba7f3627715614d113c1e1cd7dd9d47e3402a1e8a7404043e08bc14939364549

    • SHA512

      befaa9b27dc11e226b00a651aa91cbfe1ec36127084d87d44b6cd8a5076e0a092a162059295d3fcd17abb6ea9adb3b703f3652ae558c2eef4e8932131397c12d

    • SSDEEP

      24576:HWdp+y7/ya3yc7tfBA6rDUzfKrBxEATB:up+fa3rLA6s+/

    Score
    1/10
    behavioral3

    • Target

      beetle-cab/7zxa.dll

    • Size

      161KB

    • MD5

      72dcc77ba25ebc4984d959a78c8646d5

    • SHA1

      50347fcdb44426918d2eeafd5ff8ca9385fbbb0b

    • SHA256

      6b4888207c46c23d2d4e4eace8a2db01711692bc7d4bb93f3750bc41e91bb73c

    • SHA512

      1ff7c0027802e65d5d668f2c7d90b71d720c964e7da03c2a8dc8e0b8456bfa8658ca57de17e66a1ebaaef5bf0be1806188813e1da608b6861bc4d8b6a48f8876

    • SSDEEP

      3072:ifGI+bVn1rLT8VxY9ZcHwDLULRpqnhlGZcQU6aRg+NmVRmCHOtGgYckP:3eK7QwUqnT6aRfmVR5SYz

    Score
    3/10
    behavioral4

    • Target

      beetle-cab/arc.7z

    • Size

      11.9MB

    • MD5

      abd05882a7125de640b189716a37e913

    • SHA1

      1309933bdab3153abdd7e1269f4ff409f45331dd

    • SHA256

      48435dcd68f7eaedb6bab82de79a35888aaeeb1b742e3ca71180028079319cc1

    • SHA512

      24ce66ca3531d1d4315831b3cc01ff294743f0ea0c5ea857e41d2213c936373e2f869dba8413966896b9c33cc8c8d83b313858d10e5a70fc803c503645a353c2

    • SSDEEP

      196608:/OZYSmderuHCLPmuMqqxnmjaxp3P4CQKrKYtcb34Iv8XYkohvqDH1mps8uVaed8f:/OZYSgyuiLPmzqqxnmIP4CttjIqYkoh7

    Score
    3/10
    behavioral5

    • Target

      beetle-cab/start.cmd

    • Size

      86B

    • MD5

      232ebf167ea35163ea69a1570be7b03e

    • SHA1

      b8bc8c8b3f9ebf83ec43244a934389bd98849a0a

    • SHA256

      030ee398e53caf0928e757162f3c7be7d593a59dde2795991ec7e4fd8e71f2e3

    • SHA512

      efe7d716b4c2553b1dc295271b1bb32fccf12e2b64e6de7adbf5f8284bdee1c3a92b5a227c46a6bff6c1298d2e7319b73b7a75651710cad84564f0c4ec4c917f

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral6

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

3
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks