Overview

overview

10

Static

static

8acf8a241a...6e.exe

windows7-x64

10

8acf8a241a...6e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8acf8a241adb9b57f2fc336f6b2e3cc93376eb374da73350873b2aca5b36d36e

  • Size

    78KB

  • Sample

    221023-kdlslahdfn

  • MD5

    9de5f6153622535b6cef04354364a3bc

  • SHA1

    d2ca662e5cf9bb19490127d49ee872e8c51acfa2

  • SHA256

    8acf8a241adb9b57f2fc336f6b2e3cc93376eb374da73350873b2aca5b36d36e

  • SHA512

    c065cf0f511ef2e2fcd96e6d82214d1fc2a935ac9af10cc15a9569d73a06afbb8ab1162cc63dbac88d801e62db861489d88fe314d518e16ec61f280b5a9b6b83

  • SSDEEP

    1536:SPWtHFo6uaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtB9/d1da:SPWtHFoI3DJywQjDgTLopLwdCFJzB9/0

Score
10/10
metamorpherratratstealertrojan

Malware Config

Targets

    • Target

      8acf8a241adb9b57f2fc336f6b2e3cc93376eb374da73350873b2aca5b36d36e

    • Size

      78KB

    • MD5

      9de5f6153622535b6cef04354364a3bc

    • SHA1

      d2ca662e5cf9bb19490127d49ee872e8c51acfa2

    • SHA256

      8acf8a241adb9b57f2fc336f6b2e3cc93376eb374da73350873b2aca5b36d36e

    • SHA512

      c065cf0f511ef2e2fcd96e6d82214d1fc2a935ac9af10cc15a9569d73a06afbb8ab1162cc63dbac88d801e62db861489d88fe314d518e16ec61f280b5a9b6b83

    • SSDEEP

      1536:SPWtHFo6uaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtB9/d1da:SPWtHFoI3DJywQjDgTLopLwdCFJzB9/0

    Score
    10/10
    metamorpherratratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scripting

1
T1064

Persistence

Privilege Escalation

Defense Evasion

Scripting

1
T1064

Credential Access

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks