General

  • Target

    22df46f11c1472546378ffd4b69269c8035abcdc34523613c18b0e8bd547c7fd

  • Size

    78KB

  • Sample

    240407-x226psce44

  • MD5

    489c28346117bff8775f7bc03e031a01

  • SHA1

    dfa5db753944597180ebff7bd4517ad5f0c5797b

  • SHA256

    22df46f11c1472546378ffd4b69269c8035abcdc34523613c18b0e8bd547c7fd

  • SHA512

    70a8c4be0af7b41ad2cac2aa46ead0e5fae7142b1c131cfad2945199632c7ee3313e205595c417d35fc241b0ccd9c3d5079e7b482ca6723d877f525d6cd3bf28

  • SSDEEP

    1536:qCHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtea9/Y1cY:qCHa3Ln7N041Qqhgea9/8

Malware Config

Targets

    • Target

      22df46f11c1472546378ffd4b69269c8035abcdc34523613c18b0e8bd547c7fd

    • Size

      78KB

    • MD5

      489c28346117bff8775f7bc03e031a01

    • SHA1

      dfa5db753944597180ebff7bd4517ad5f0c5797b

    • SHA256

      22df46f11c1472546378ffd4b69269c8035abcdc34523613c18b0e8bd547c7fd

    • SHA512

      70a8c4be0af7b41ad2cac2aa46ead0e5fae7142b1c131cfad2945199632c7ee3313e205595c417d35fc241b0ccd9c3d5079e7b482ca6723d877f525d6cd3bf28

    • SSDEEP

      1536:qCHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtea9/Y1cY:qCHa3Ln7N041Qqhgea9/8

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks