General

  • Target

    82804bb072f5575a2a958361005ff25455679c20407f23d62e9c2af724139ead

  • Size

    78KB

  • Sample

    240407-2syt5sgh3w

  • MD5

    ae2d29af00e36b391921ce19b7eedd09

  • SHA1

    1c0a35eef602a3d24cd6ee10be5d40523fedf92c

  • SHA256

    82804bb072f5575a2a958361005ff25455679c20407f23d62e9c2af724139ead

  • SHA512

    06c721e6c134454e4c60647881cb0b865ceb730b50054d610ff09d0887362bb0bf9a868527fcd679d49a2a2856770934c6b707051b0788381bd1db85c6124812

  • SSDEEP

    1536:QWtHFo6638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQteV9/Xs1T2:QWtHFo53Ln7N041QqhgeV9/j

Malware Config

Targets

    • Target

      82804bb072f5575a2a958361005ff25455679c20407f23d62e9c2af724139ead

    • Size

      78KB

    • MD5

      ae2d29af00e36b391921ce19b7eedd09

    • SHA1

      1c0a35eef602a3d24cd6ee10be5d40523fedf92c

    • SHA256

      82804bb072f5575a2a958361005ff25455679c20407f23d62e9c2af724139ead

    • SHA512

      06c721e6c134454e4c60647881cb0b865ceb730b50054d610ff09d0887362bb0bf9a868527fcd679d49a2a2856770934c6b707051b0788381bd1db85c6124812

    • SSDEEP

      1536:QWtHFo6638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQteV9/Xs1T2:QWtHFo53Ln7N041QqhgeV9/j

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks