General
-
Target
bb0f322478ec29069469df2cc12d80c1e11ae81b5c808b657408d09532354528
-
Size
78KB
-
Sample
240408-a7q93abf91
-
MD5
119ed38d2bcf4b4f54a22beb497c1fcd
-
SHA1
4c2bfcef582d5fa86cce44ec2b78792a8352b0de
-
SHA256
bb0f322478ec29069469df2cc12d80c1e11ae81b5c808b657408d09532354528
-
SHA512
690f58067776c3e0ddd2e6fdca1c7dd9d371f5c3965267089356e077a99adb06b71a399d1b527784c5758118b8d399bb707288af151c7a2f110b3f2093352a02
-
SSDEEP
1536:hCHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtL9/O1lC:hCHa3Ln7N041QqhgL9/T
Static task
static1
Behavioral task
behavioral1
Sample
bb0f322478ec29069469df2cc12d80c1e11ae81b5c808b657408d09532354528.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bb0f322478ec29069469df2cc12d80c1e11ae81b5c808b657408d09532354528.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
bb0f322478ec29069469df2cc12d80c1e11ae81b5c808b657408d09532354528
-
Size
78KB
-
MD5
119ed38d2bcf4b4f54a22beb497c1fcd
-
SHA1
4c2bfcef582d5fa86cce44ec2b78792a8352b0de
-
SHA256
bb0f322478ec29069469df2cc12d80c1e11ae81b5c808b657408d09532354528
-
SHA512
690f58067776c3e0ddd2e6fdca1c7dd9d371f5c3965267089356e077a99adb06b71a399d1b527784c5758118b8d399bb707288af151c7a2f110b3f2093352a02
-
SSDEEP
1536:hCHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtL9/O1lC:hCHa3Ln7N041QqhgL9/T
Score10/10-
MetamorpherRAT
Metamorpherrat is a hacking tool that has been around for a while since 2013.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-