Overview

overview

10

Static

static

3

4492372629...8f.exe

windows7-x64

10

4492372629...8f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    44923726297473ca80cdf655e865948f

  • Size

    78KB

  • Sample

    240105-17nr2schb2

  • MD5

    44923726297473ca80cdf655e865948f

  • SHA1

    1b5fdeb057be925dc89ff451dd8475ff9b2414e7

  • SHA256

    9da05953d618d04d2a59501cf1f56cbe212c2b7cc2f31ce0298d6534600e4a2b

  • SHA512

    91abc84d4a2d0cf3067c888824941fb7de3fe64fd2859c505d3e423e951fe1158360c7313d9040bc258759cae537879a3fab5328bb67786010ca68d2112c812e

  • SSDEEP

    1536:ZHFo6M3xXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQt69/ty1p5:ZHFon3xSyRxvY3md+dWWZy69/a

Score
10/10
metamorpherratpersistenceratstealertrojan

Malware Config

Targets

    • Target

      44923726297473ca80cdf655e865948f

    • Size

      78KB

    • MD5

      44923726297473ca80cdf655e865948f

    • SHA1

      1b5fdeb057be925dc89ff451dd8475ff9b2414e7

    • SHA256

      9da05953d618d04d2a59501cf1f56cbe212c2b7cc2f31ce0298d6534600e4a2b

    • SHA512

      91abc84d4a2d0cf3067c888824941fb7de3fe64fd2859c505d3e423e951fe1158360c7313d9040bc258759cae537879a3fab5328bb67786010ca68d2112c812e

    • SSDEEP

      1536:ZHFo6M3xXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQt69/ty1p5:ZHFon3xSyRxvY3md+dWWZy69/a

    Score
    10/10
    metamorpherratpersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks