General

  • Target

    0c68b5082b36499166a2533999515ed441a520af2a5894edd8d74eb849947280

  • Size

    78KB

  • Sample

    240407-w6ck6sba7y

  • MD5

    17e5bf1046aaca5d4937d46c318b22e2

  • SHA1

    f620236d654cc6247fb603b2f3e4d9399407cf23

  • SHA256

    0c68b5082b36499166a2533999515ed441a520af2a5894edd8d74eb849947280

  • SHA512

    6644b1817c616ae01239d59e56c8d481ce0e58bc65a0bdfbae7d2a65d92607f480d21dac65940bf6a2ae7771493fcea618c3b77fa1a3436e57eeb69fcc5b5e42

  • SSDEEP

    1536:3RWV5jidy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtC6Z9/gF1tu:3RWV5j9n7N041QqhgB9/l

Malware Config

Targets

    • Target

      0c68b5082b36499166a2533999515ed441a520af2a5894edd8d74eb849947280

    • Size

      78KB

    • MD5

      17e5bf1046aaca5d4937d46c318b22e2

    • SHA1

      f620236d654cc6247fb603b2f3e4d9399407cf23

    • SHA256

      0c68b5082b36499166a2533999515ed441a520af2a5894edd8d74eb849947280

    • SHA512

      6644b1817c616ae01239d59e56c8d481ce0e58bc65a0bdfbae7d2a65d92607f480d21dac65940bf6a2ae7771493fcea618c3b77fa1a3436e57eeb69fcc5b5e42

    • SSDEEP

      1536:3RWV5jidy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtC6Z9/gF1tu:3RWV5j9n7N041QqhgB9/l

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks