General

  • Target

    8c5cdae9cb74570d70fde6349a82a1a72484e930edc003db700e1005c18d98d8

  • Size

    78KB

  • Sample

    240407-26yrashd4t

  • MD5

    4d58a1a717b57f8fd1a0e0b08e72d521

  • SHA1

    3b12b2896e20274e18d71888f0eda019e96872bd

  • SHA256

    8c5cdae9cb74570d70fde6349a82a1a72484e930edc003db700e1005c18d98d8

  • SHA512

    d46d9fa56d0b1c044d7b12ba79bdb75e035b8fffca97872ca1a7a74041e7cc091e49a571fe8c1f57b547b5f264f573b4fd905411b21598e3815bc907f6d9f261

  • SSDEEP

    1536:PPy5jS/dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQt96V9/n17mQ:PPy5jSen7N041Qqhga9/J

Malware Config

Targets

    • Target

      8c5cdae9cb74570d70fde6349a82a1a72484e930edc003db700e1005c18d98d8

    • Size

      78KB

    • MD5

      4d58a1a717b57f8fd1a0e0b08e72d521

    • SHA1

      3b12b2896e20274e18d71888f0eda019e96872bd

    • SHA256

      8c5cdae9cb74570d70fde6349a82a1a72484e930edc003db700e1005c18d98d8

    • SHA512

      d46d9fa56d0b1c044d7b12ba79bdb75e035b8fffca97872ca1a7a74041e7cc091e49a571fe8c1f57b547b5f264f573b4fd905411b21598e3815bc907f6d9f261

    • SSDEEP

      1536:PPy5jS/dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQt96V9/n17mQ:PPy5jSen7N041Qqhga9/J

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks