Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

ae210788bd...63.exe

windows7-x64

10

ae210788bd...63.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ae210788bd768ba5045a507e693a8163

  • Size

    78KB

  • Sample

    240229-kr39sscb78

  • MD5

    ae210788bd768ba5045a507e693a8163

  • SHA1

    9023d28eee827c8cf87bca3aa68df61c0426a5ca

  • SHA256

    85a35530eabc89c14ff95fb1ab1848c9749c4714bde250d3e798e77f211a627a

  • SHA512

    1296f39c090d2f56ec192dbcb54b3a86ba953dc614dae97a096c70eae3d89b0b7e5d3999f460a3ddf74783ed661325f2dd8834dba1a4a1f11794826b53334d1f

  • SSDEEP

    1536:dPWV58FXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtC639/F1j5:dPWV58FSyRxvY3md+dWWZyP9/d

Score
10/10
metamorpherratpersistenceratstealertrojan

Malware Config

Targets

    • Target

      ae210788bd768ba5045a507e693a8163

    • Size

      78KB

    • MD5

      ae210788bd768ba5045a507e693a8163

    • SHA1

      9023d28eee827c8cf87bca3aa68df61c0426a5ca

    • SHA256

      85a35530eabc89c14ff95fb1ab1848c9749c4714bde250d3e798e77f211a627a

    • SHA512

      1296f39c090d2f56ec192dbcb54b3a86ba953dc614dae97a096c70eae3d89b0b7e5d3999f460a3ddf74783ed661325f2dd8834dba1a4a1f11794826b53334d1f

    • SSDEEP

      1536:dPWV58FXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtC639/F1j5:dPWV58FSyRxvY3md+dWWZyP9/d

    Score
    10/10
    metamorpherratpersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks