metamorpherrat | c4862f15465388e4a45c9f435ea08088ee506c53d4f8ca0c3afa89790ed8df49 | Triage

Sharing

General

Target

c4862f15465388e4a45c9f435ea08088ee506c53d4f8ca0c3afa89790ed8df49
Size

78KB
Sample

220329-x1q22secgj
MD5

01579875f974e0d86a05ff91fa9f50b3
SHA1

88ca1813d13a245558e16dac151f81408a0a8fab
SHA256

c4862f15465388e4a45c9f435ea08088ee506c53d4f8ca0c3afa89790ed8df49
SHA512

90bc3cd313c2e44ac238d0a77089ab2b68ae93454b48cab09d19ed1da79ad7f20f209a3390f9af9cbcad3463a58a11d8f61b506de9b7279c3348f5b54a00fe28

Score

10^/10

metamorpherrat persistence rat stealer suricata trojan

Malware Config

Targets

- Target
  
  c4862f15465388e4a45c9f435ea08088ee506c53d4f8ca0c3afa89790ed8df49
- Size
  
  78KB
- MD5
  
  01579875f974e0d86a05ff91fa9f50b3
- SHA1
  
  88ca1813d13a245558e16dac151f81408a0a8fab
- SHA256
  
  c4862f15465388e4a45c9f435ea08088ee506c53d4f8ca0c3afa89790ed8df49
- SHA512
  
  90bc3cd313c2e44ac238d0a77089ab2b68ae93454b48cab09d19ed1da79ad7f20f209a3390f9af9cbcad3463a58a11d8f61b506de9b7279c3348f5b54a00fe28
Score

10^/10

metamorpherrat persistence rat stealer suricata trojan
- MetamorpherRAT
  Metamorpherrat is a hacking tool that has been around for a while since 2013.
  trojan rat stealer metamorpherrat
- suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
  suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
  suricata
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Uses the VBS compiler for execution
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scripting

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Scripting

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

metamorpherratpersistenceratstealersuricatatrojan

behavioral2