Overview

overview

7

Static

static

3

beetle-cab/7za.dll

windows10-2004-x64

3

beetle-cab/7za.exe

windows10-2004-x64

3

beetle-cab/7zxa.dll

windows10-2004-x64

3

beetle-cab/start.cmd

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    beetle-cab.cab

  • Size

    13.1MB

  • Sample

    240726-v3hgkstanp

  • MD5

    64d612286675052142ea0f1b764fb461

  • SHA1

    c1bf827dd9bff1309cdc014f7c008cdf77532562

  • SHA256

    bf0a5efb3d84fa52938ccf45d84483386606204b4f6473cb9030b53baf7b1ba4

  • SHA512

    3ad54f0d68f2e7b4493f307c2031b4f0b37a9bbb61387f3079b4374fc4c9e8ce346bf5f6dbe40612d8af02acb6aa9aaa29490cdeeb90259b4dda536bb766498e

  • SSDEEP

    393216:ykC5RTCLfUqwxGPPmoDFYJbFFyC1+JdIivLDb15OINzxoNf:yJv6fUqgpJ1+5LDJ5OITef

Score
7/10
discovery

Malware Config

Targets

    • Target

      beetle-cab/7za.dll

    • Size

      272KB

    • MD5

      b54e2dcd1a3d593ca0ae4cb71910710e

    • SHA1

      15ab00317b310a7a535684c7221e0eb6cde68ac2

    • SHA256

      d7f1224cc4afb90af3792dadfdf2f14bad4a19329ee0f3c87c111611aa36b7b1

    • SHA512

      1414fd599095c3afd4faa6cf56e2f00d9db4d80f460457e4e08734ee24ed852f74d5813b4e96091c330ba8dd2f998995233583bbf887eff1c89b924b09a3fcc0

    • SSDEEP

      6144:Ml7K/bZ3Xb4/e4BQSx65Pz6RjVM/oTO+T7KmdCUOHn:MRK/bi/ecx6gJVMgTOE7KAQ

    Score
    3/10
    discovery
    behavioral1

    • Target

      beetle-cab/7za.exe

    • Size

      796KB

    • MD5

      90aac6489f6b226bf7dc1adabfdb1259

    • SHA1

      c90c47b717b776922cdd09758d2b4212d9ae4911

    • SHA256

      ba7f3627715614d113c1e1cd7dd9d47e3402a1e8a7404043e08bc14939364549

    • SHA512

      befaa9b27dc11e226b00a651aa91cbfe1ec36127084d87d44b6cd8a5076e0a092a162059295d3fcd17abb6ea9adb3b703f3652ae558c2eef4e8932131397c12d

    • SSDEEP

      24576:HWdp+y7/ya3yc7tfBA6rDUzfKrBxEATB:up+fa3rLA6s+/

    Score
    3/10
    discovery
    behavioral2

    • Target

      beetle-cab/7zxa.dll

    • Size

      161KB

    • MD5

      72dcc77ba25ebc4984d959a78c8646d5

    • SHA1

      50347fcdb44426918d2eeafd5ff8ca9385fbbb0b

    • SHA256

      6b4888207c46c23d2d4e4eace8a2db01711692bc7d4bb93f3750bc41e91bb73c

    • SHA512

      1ff7c0027802e65d5d668f2c7d90b71d720c964e7da03c2a8dc8e0b8456bfa8658ca57de17e66a1ebaaef5bf0be1806188813e1da608b6861bc4d8b6a48f8876

    • SSDEEP

      3072:ifGI+bVn1rLT8VxY9ZcHwDLULRpqnhlGZcQU6aRg+NmVRmCHOtGgYckP:3eK7QwUqnT6aRfmVR5SYz

    Score
    3/10
    discovery
    behavioral3

    • Target

      beetle-cab/start.cmd

    • Size

      86B

    • MD5

      232ebf167ea35163ea69a1570be7b03e

    • SHA1

      b8bc8c8b3f9ebf83ec43244a934389bd98849a0a

    • SHA256

      030ee398e53caf0928e757162f3c7be7d593a59dde2795991ec7e4fd8e71f2e3

    • SHA512

      efe7d716b4c2553b1dc295271b1bb32fccf12e2b64e6de7adbf5f8284bdee1c3a92b5a227c46a6bff6c1298d2e7319b73b7a75651710cad84564f0c4ec4c917f

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral4

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

4
T1614

System Language Discovery

4
T1614.001

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks