General

  • Target

    c3fb33f75d4f5dcb20ed9e9e72161d298ad80162399551adfc774e7a5f5686eb

  • Size

    78KB

  • Sample

    240408-bkz45acd29

  • MD5

    50c79d86700b2e9515eaea88c63932a7

  • SHA1

    52167b7250a80b401f52f1c839ece55facbc1ade

  • SHA256

    c3fb33f75d4f5dcb20ed9e9e72161d298ad80162399551adfc774e7a5f5686eb

  • SHA512

    0aa6ed972fb3ec6f55e53b1db451d8dbe2a84612363f09b426c4eb212e40a1f64c13d3ded17a6dda3f98b64c0a411df3fe7fd3ddb30bfcbbdf57336273235a9e

  • SSDEEP

    1536:JWtHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQte99/931wz:JWtHa3Ln7N041Qqhge99/m

Malware Config

Targets

    • Target

      c3fb33f75d4f5dcb20ed9e9e72161d298ad80162399551adfc774e7a5f5686eb

    • Size

      78KB

    • MD5

      50c79d86700b2e9515eaea88c63932a7

    • SHA1

      52167b7250a80b401f52f1c839ece55facbc1ade

    • SHA256

      c3fb33f75d4f5dcb20ed9e9e72161d298ad80162399551adfc774e7a5f5686eb

    • SHA512

      0aa6ed972fb3ec6f55e53b1db451d8dbe2a84612363f09b426c4eb212e40a1f64c13d3ded17a6dda3f98b64c0a411df3fe7fd3ddb30bfcbbdf57336273235a9e

    • SSDEEP

      1536:JWtHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQte99/931wz:JWtHa3Ln7N041Qqhge99/m

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks