General
-
Target
NEAS.22ac33ab0ddc4e1912591902c7feb6f0.exe
-
Size
78KB
-
Sample
231022-vswlfsca41
-
MD5
22ac33ab0ddc4e1912591902c7feb6f0
-
SHA1
e60cfd066a93f11616befd133b2899942b54b22c
-
SHA256
44f6bbb2023bcfda5f0887bf434e5749c59fcc65db659cba9186eb01e285d94f
-
SHA512
2055b5f97bd9822a857dd433ffdb3534430947402ab2f02f565904975e979042842782a9161da0537f919af20758d636b49b0363fdee2208bb2d57ec6edc4fdf
-
SSDEEP
1536:KRWtHF3JIdXT0XRhyRjVf3HaXOJR0zcEIvCZ1xjs9np/IPioYJbQt+39/CI13c:KRWtHF5INSyRxvHF5vCbxwpI6W+39/Ch
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.22ac33ab0ddc4e1912591902c7feb6f0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.22ac33ab0ddc4e1912591902c7feb6f0.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
NEAS.22ac33ab0ddc4e1912591902c7feb6f0.exe
-
Size
78KB
-
MD5
22ac33ab0ddc4e1912591902c7feb6f0
-
SHA1
e60cfd066a93f11616befd133b2899942b54b22c
-
SHA256
44f6bbb2023bcfda5f0887bf434e5749c59fcc65db659cba9186eb01e285d94f
-
SHA512
2055b5f97bd9822a857dd433ffdb3534430947402ab2f02f565904975e979042842782a9161da0537f919af20758d636b49b0363fdee2208bb2d57ec6edc4fdf
-
SSDEEP
1536:KRWtHF3JIdXT0XRhyRjVf3HaXOJR0zcEIvCZ1xjs9np/IPioYJbQt+39/CI13c:KRWtHF5INSyRxvHF5vCbxwpI6W+39/Ch
Score10/10-
MetamorpherRAT
Metamorpherrat is a hacking tool that has been around for a while since 2013.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-