metamorpherrat | 82034508e6639dcbf9bb36c028e7b35ad271779a242870a3839ee148b4ea9305 | Triage

Sharing

General

Target

NEAS.004c34856806b862f88d96f92c46ddb0_JC.exe
Size

78KB
Sample

231019-vpdapshc4z
MD5

004c34856806b862f88d96f92c46ddb0
SHA1

247e797d9e8f8e22a4856bffba868815539b8c2a
SHA256

82034508e6639dcbf9bb36c028e7b35ad271779a242870a3839ee148b4ea9305
SHA512

911274d17ca625b42944b6d4e5368c35e4696608203d76bfe2252a4e2d0eeb3582ed7e67a617ff1cfaa802dc998fb4321224009f0887913f2ee8bb0325e59999
SSDEEP

1536:GPCHY6uaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtx9/L1mr:GPCHYI3DJywQjDgTLopLwdCFJzx9/6

Score

10^/10

metamorpherrat rat stealer trojan

Malware Config

Targets

- Target
  
  NEAS.004c34856806b862f88d96f92c46ddb0_JC.exe
- Size
  
  78KB
- MD5
  
  004c34856806b862f88d96f92c46ddb0
- SHA1
  
  247e797d9e8f8e22a4856bffba868815539b8c2a
- SHA256
  
  82034508e6639dcbf9bb36c028e7b35ad271779a242870a3839ee148b4ea9305
- SHA512
  
  911274d17ca625b42944b6d4e5368c35e4696608203d76bfe2252a4e2d0eeb3582ed7e67a617ff1cfaa802dc998fb4321224009f0887913f2ee8bb0325e59999
- SSDEEP
  
  1536:GPCHY6uaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtx9/L1mr:GPCHYI3DJywQjDgTLopLwdCFJzx9/6
Score

10^/10

metamorpherrat rat stealer trojan
- MetamorpherRAT
  Metamorpherrat is a hacking tool that has been around for a while since 2013.
  trojan rat stealer metamorpherrat
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Uses the VBS compiler for execution
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scripting

Persistence

Privilege Escalation

Defense Evasion

Scripting

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks

static1

behavioral1

metamorpherratratstealertrojan

behavioral2

metamorpherratratstealertrojan