Overview

overview

10

Static

static

3

573188cc51...c7.exe

windows7-x64

10

573188cc51...c7.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    573188cc51a414d8f1eee6fba2cb31c7

  • Size

    78KB

  • Sample

    240112-w7vhdadchm

  • MD5

    573188cc51a414d8f1eee6fba2cb31c7

  • SHA1

    e0952ffad06794fef56685d5914334f98613c1a0

  • SHA256

    94a056f6d13abc9ce61618deecbb5b5b0f1fa8034620931a5f858cd9b53486e3

  • SHA512

    9e4d01fa9a8653eae0c705c1ffbba80351fbf2c2ec2571435bee1c46bad87e759c327af36ab8eb1a2943bdb967e950ba7526dd190669c07cbc9ccb867854311c

  • SSDEEP

    1536:mRWV5jULT8hn2Ep7WzPdVj6Ju8B3AZ242UdIAkD4x3HT4hPVoYdVQti6K9/l1Zk:mRWV5jiE2EwR4uY41HyvYy9/e

Score
10/10
metamorpherratpersistenceratstealertrojan

Malware Config

Targets

    • Target

      573188cc51a414d8f1eee6fba2cb31c7

    • Size

      78KB

    • MD5

      573188cc51a414d8f1eee6fba2cb31c7

    • SHA1

      e0952ffad06794fef56685d5914334f98613c1a0

    • SHA256

      94a056f6d13abc9ce61618deecbb5b5b0f1fa8034620931a5f858cd9b53486e3

    • SHA512

      9e4d01fa9a8653eae0c705c1ffbba80351fbf2c2ec2571435bee1c46bad87e759c327af36ab8eb1a2943bdb967e950ba7526dd190669c07cbc9ccb867854311c

    • SSDEEP

      1536:mRWV5jULT8hn2Ep7WzPdVj6Ju8B3AZ242UdIAkD4x3HT4hPVoYdVQti6K9/l1Zk:mRWV5jiE2EwR4uY41HyvYy9/e

    Score
    10/10
    metamorpherratpersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks