Overview

overview

10

Static

static

3

165f66bfc5...c6.exe

windows7-x64

10

165f66bfc5...c6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    165f66bfc56836f4f737d1cde21943c6

  • Size

    78KB

  • Sample

    231230-mv6v7sccfm

  • MD5

    165f66bfc56836f4f737d1cde21943c6

  • SHA1

    0b36cd366bc025ae75da2f125c6fc6871fd24bc4

  • SHA256

    51f8736389da6729a68e82f787def808fa0ba955647f67e77703f2b78e54b593

  • SHA512

    e2d675584bfa20303fa83cc42988ab1242c26f07be85fab3d94cd2e160cc7b34bfa3eef5e852fd5b5ea356bee1076e20e556ff8b103afdaf7ccc6264f8d93012

  • SSDEEP

    1536:IRWV5j7XT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtC6n9/z1W7:IRWV5j7SyRxvY3md+dWWZyP9/m

Score
10/10
metamorpherratpersistenceratstealertrojan

Malware Config

Targets

    • Target

      165f66bfc56836f4f737d1cde21943c6

    • Size

      78KB

    • MD5

      165f66bfc56836f4f737d1cde21943c6

    • SHA1

      0b36cd366bc025ae75da2f125c6fc6871fd24bc4

    • SHA256

      51f8736389da6729a68e82f787def808fa0ba955647f67e77703f2b78e54b593

    • SHA512

      e2d675584bfa20303fa83cc42988ab1242c26f07be85fab3d94cd2e160cc7b34bfa3eef5e852fd5b5ea356bee1076e20e556ff8b103afdaf7ccc6264f8d93012

    • SSDEEP

      1536:IRWV5j7XT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtC6n9/z1W7:IRWV5j7SyRxvY3md+dWWZyP9/m

    Score
    10/10
    metamorpherratpersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks