Overview

overview

10

Static

static

3

cc4488c636...06.exe

windows7-x64

10

cc4488c636...06.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cc4488c6362d1f9e95587139bacb4d06

  • Size

    78KB

  • Sample

    240315-ygds2she4v

  • MD5

    cc4488c6362d1f9e95587139bacb4d06

  • SHA1

    cacb23d594e543851e57ccb24b8cf9473ff31e56

  • SHA256

    c8df9b4050d59764f248e18f9e10afffa657565cf9f21873f99fdbdb1889affc

  • SHA512

    bff49c1308a833785098b494b26348c14c1097a73fa8a36f5e33aaa79dac071cf0d22188de025a11eb7ddc7e3fe787e6b199ad1080b8e53ed3e902cf5c8f8d70

  • SSDEEP

    1536:0sHY6M3xXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtg9/s1M+:0sHYn3xSyRxvY3md+dWWZyg9/O

Score
10/10
metamorpherratpersistenceratstealertrojan

Malware Config

Targets

    • Target

      cc4488c6362d1f9e95587139bacb4d06

    • Size

      78KB

    • MD5

      cc4488c6362d1f9e95587139bacb4d06

    • SHA1

      cacb23d594e543851e57ccb24b8cf9473ff31e56

    • SHA256

      c8df9b4050d59764f248e18f9e10afffa657565cf9f21873f99fdbdb1889affc

    • SHA512

      bff49c1308a833785098b494b26348c14c1097a73fa8a36f5e33aaa79dac071cf0d22188de025a11eb7ddc7e3fe787e6b199ad1080b8e53ed3e902cf5c8f8d70

    • SSDEEP

      1536:0sHY6M3xXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtg9/s1M+:0sHYn3xSyRxvY3md+dWWZyg9/O

    Score
    10/10
    metamorpherratpersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks