Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.d76292ec99b5d78861bab2187c494c80.exe
-
Size
78KB
-
Sample
231111-e3s1babe63
-
MD5
d76292ec99b5d78861bab2187c494c80
-
SHA1
bc0c1af3ea0e1a80cc6751888f5c2228145fcb0f
-
SHA256
33bfdf7cc9a7aeaae48dfd502ce3d7d9a4912b0968a985e9ecafd629a123138c
-
SHA512
c88fc1bf663cb9b669b1d7e2a8ad9e09b9cea5556dd7a8a51668501b25689a00ac0ffa6d2d2ab73ea6bfa15c94cbe477fb61e1fe92adaf69ee04479e7aff172c
-
SSDEEP
1536:6CHF3638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtZ9/8R11A:6CHFq3Ln7N041QqhgZ9/9
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.d76292ec99b5d78861bab2187c494c80.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.d76292ec99b5d78861bab2187c494c80.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
NEAS.d76292ec99b5d78861bab2187c494c80.exe
-
Size
78KB
-
MD5
d76292ec99b5d78861bab2187c494c80
-
SHA1
bc0c1af3ea0e1a80cc6751888f5c2228145fcb0f
-
SHA256
33bfdf7cc9a7aeaae48dfd502ce3d7d9a4912b0968a985e9ecafd629a123138c
-
SHA512
c88fc1bf663cb9b669b1d7e2a8ad9e09b9cea5556dd7a8a51668501b25689a00ac0ffa6d2d2ab73ea6bfa15c94cbe477fb61e1fe92adaf69ee04479e7aff172c
-
SSDEEP
1536:6CHF3638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtZ9/8R11A:6CHFq3Ln7N041QqhgZ9/9
Score10/10-
MetamorpherRAT
Metamorpherrat is a hacking tool that has been around for a while since 2013.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-