metamorpherrat | 1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32 | Triage

Sharing

General

Target

1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32
Size

78KB
Sample

220512-xj4ltabedn
MD5

00ab2265b8b31c56c729ffe63191fac4
SHA1

c59c2138c9e098edc515340c2a84e2ef0973c332
SHA256

1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32
SHA512

e91ec018a5f4424bec6da75b19a3527764ae96e3106b06e9167e5a0a5dd55fd15c20bb03d1e48241c66f18f018248c04f1a74011873aeee656a5b500bdb0c4bf

Score

10^/10

metamorpherrat persistence rat stealer suricata trojan

Malware Config

Targets

- Target
  
  1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32
- Size
  
  78KB
- MD5
  
  00ab2265b8b31c56c729ffe63191fac4
- SHA1
  
  c59c2138c9e098edc515340c2a84e2ef0973c332
- SHA256
  
  1e10e52c761853980cbd76a59d0f661600e857746173ad688202ba04f622cb32
- SHA512
  
  e91ec018a5f4424bec6da75b19a3527764ae96e3106b06e9167e5a0a5dd55fd15c20bb03d1e48241c66f18f018248c04f1a74011873aeee656a5b500bdb0c4bf
Score

10^/10

metamorpherrat persistence rat stealer suricata trojan
- MetamorpherRAT
  Metamorpherrat is a hacking tool that has been around for a while since 2013.
  trojan rat stealer metamorpherrat
- suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
  suricata: ET MALWARE Possible Compromised Host AnubisNetworks Sinkhole Cookie Value Snkz
  suricata
- Executes dropped EXE
- Deletes itself
- Loads dropped DLL
- Uses the VBS compiler for execution
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scripting

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Scripting

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

metamorpherratpersistenceratstealersuricatatrojan

behavioral2