Overview

overview

10

Static

static

3

285faf9604...c7.exe

windows7-x64

7

285faf9604...c7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    285faf9604a12f8dec71fc3f98b6ffc7

  • Size

    78KB

  • Sample

    231231-e7phpacgdq

  • MD5

    285faf9604a12f8dec71fc3f98b6ffc7

  • SHA1

    9e8af3f22274a309c83ab0e49d27f851265929a3

  • SHA256

    6e390a259374c1624ea97cbe13d71113252e8bea7170feea33b7e647b4009c0a

  • SHA512

    f8ac45d9ef6568f906bdd4eb3210061f709715488b639b20ac306d10f64116b417b8ff180de69bca04198fba2e55fc9866d62b903429ab348a902a38c6ff9b6b

  • SSDEEP

    1536:5e58wXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtC6Hs9/qDbd1y/:5e58oSyRxvY3md+dWWZyfs9/q0

Score
10/10
metamorpherratpersistenceratstealertrojan

Malware Config

Targets

    • Target

      285faf9604a12f8dec71fc3f98b6ffc7

    • Size

      78KB

    • MD5

      285faf9604a12f8dec71fc3f98b6ffc7

    • SHA1

      9e8af3f22274a309c83ab0e49d27f851265929a3

    • SHA256

      6e390a259374c1624ea97cbe13d71113252e8bea7170feea33b7e647b4009c0a

    • SHA512

      f8ac45d9ef6568f906bdd4eb3210061f709715488b639b20ac306d10f64116b417b8ff180de69bca04198fba2e55fc9866d62b903429ab348a902a38c6ff9b6b

    • SSDEEP

      1536:5e58wXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtC6Hs9/qDbd1y/:5e58oSyRxvY3md+dWWZyfs9/q0

    Score
    10/10
    persistencemetamorpherratratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks