General

  • Target

    bb0f322478ec29069469df2cc12d80c1e11ae81b5c808b657408d09532354528

  • Size

    78KB

  • Sample

    240408-a7q93abf91

  • MD5

    119ed38d2bcf4b4f54a22beb497c1fcd

  • SHA1

    4c2bfcef582d5fa86cce44ec2b78792a8352b0de

  • SHA256

    bb0f322478ec29069469df2cc12d80c1e11ae81b5c808b657408d09532354528

  • SHA512

    690f58067776c3e0ddd2e6fdca1c7dd9d371f5c3965267089356e077a99adb06b71a399d1b527784c5758118b8d399bb707288af151c7a2f110b3f2093352a02

  • SSDEEP

    1536:hCHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtL9/O1lC:hCHa3Ln7N041QqhgL9/T

Malware Config

Targets

    • Target

      bb0f322478ec29069469df2cc12d80c1e11ae81b5c808b657408d09532354528

    • Size

      78KB

    • MD5

      119ed38d2bcf4b4f54a22beb497c1fcd

    • SHA1

      4c2bfcef582d5fa86cce44ec2b78792a8352b0de

    • SHA256

      bb0f322478ec29069469df2cc12d80c1e11ae81b5c808b657408d09532354528

    • SHA512

      690f58067776c3e0ddd2e6fdca1c7dd9d371f5c3965267089356e077a99adb06b71a399d1b527784c5758118b8d399bb707288af151c7a2f110b3f2093352a02

    • SSDEEP

      1536:hCHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtL9/O1lC:hCHa3Ln7N041QqhgL9/T

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks