Overview

overview

10

Static

static

e11c7bd8da...84.exe

windows7_x64

10

e11c7bd8da...84.exe

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e11c7bd8da2a209b0921a7b05cdc8b53ae47f4d841526f2a0ab7bed2a8320f84

  • Size

    78KB

  • Sample

    220326-xdk8aagbb9

  • MD5

    03f80ce84ca1e213d670394a208ca3d7

  • SHA1

    d4db6aa1820361ca25956b41149049c785a24801

  • SHA256

    e11c7bd8da2a209b0921a7b05cdc8b53ae47f4d841526f2a0ab7bed2a8320f84

  • SHA512

    91c099514ae46314c321df8e3655dcd0f51ad155caa834342a69881d6b50b8f28aba9bd3efd7852f7b2bbb1552cb966755a6d5e99d78e7f3537ef9f550113a09

Score
10/10
metamorpherratratstealertrojan

Malware Config

Targets

    • Target

      e11c7bd8da2a209b0921a7b05cdc8b53ae47f4d841526f2a0ab7bed2a8320f84

    • Size

      78KB

    • MD5

      03f80ce84ca1e213d670394a208ca3d7

    • SHA1

      d4db6aa1820361ca25956b41149049c785a24801

    • SHA256

      e11c7bd8da2a209b0921a7b05cdc8b53ae47f4d841526f2a0ab7bed2a8320f84

    • SHA512

      91c099514ae46314c321df8e3655dcd0f51ad155caa834342a69881d6b50b8f28aba9bd3efd7852f7b2bbb1552cb966755a6d5e99d78e7f3537ef9f550113a09

    Score
    10/10
    metamorpherratratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scripting

1
T1064

Persistence

Privilege Escalation

Defense Evasion

Scripting

1
T1064

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks