General
-
Target
159ad183d8e5f85801c64376392ae26a07b37e0e3d5a2c5df4facaddc8555ca5
-
Size
78KB
-
Sample
220328-xds8wshffm
-
MD5
00d02e3cfa7c93b0c1ca7ab9d8ae838b
-
SHA1
1dce9b634527afc19e8eb375a2e536769754fed3
-
SHA256
159ad183d8e5f85801c64376392ae26a07b37e0e3d5a2c5df4facaddc8555ca5
-
SHA512
1a6a4211f4b6b5466aaf12a870e71659f31781fd6c51b9e5ca21789b833415fdc267648e51fbb267b394bb459185c6d7c7ea9c4f71087db1597d8246cb99cd60
Static task
static1
Behavioral task
behavioral1
Sample
159ad183d8e5f85801c64376392ae26a07b37e0e3d5a2c5df4facaddc8555ca5.exe
Resource
win7-20220311-en
Behavioral task
behavioral2
Sample
159ad183d8e5f85801c64376392ae26a07b37e0e3d5a2c5df4facaddc8555ca5.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
159ad183d8e5f85801c64376392ae26a07b37e0e3d5a2c5df4facaddc8555ca5
-
Size
78KB
-
MD5
00d02e3cfa7c93b0c1ca7ab9d8ae838b
-
SHA1
1dce9b634527afc19e8eb375a2e536769754fed3
-
SHA256
159ad183d8e5f85801c64376392ae26a07b37e0e3d5a2c5df4facaddc8555ca5
-
SHA512
1a6a4211f4b6b5466aaf12a870e71659f31781fd6c51b9e5ca21789b833415fdc267648e51fbb267b394bb459185c6d7c7ea9c4f71087db1597d8246cb99cd60
-
MetamorpherRAT
Metamorpherrat is a hacking tool that has been around for a while since 2013.
-
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-