General

  • Target

    436b4f5121e1244b0eb49ee558b6a52e

  • Size

    78KB

  • Sample

    240409-2ahp7see56

  • MD5

    436b4f5121e1244b0eb49ee558b6a52e

  • SHA1

    810ff57e65d8357c1dd86dfa4c02898b33f4d502

  • SHA256

    2d015441fc98484166fb95ae4f8814ec248344ff501f156e48a8516d9438eeb2

  • SHA512

    e9109e30e5f548ef45876b0a902ded4d33ca8a8468d3e005c72a7b32d779c9e39836ebac03f0462d9273ae0bacec0d84fc6b2e2b1f57d289c641716e2fbc2963

  • SSDEEP

    1536:UHFo6638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtee9/W1P4:UHFo53Ln7N041Qqhgee9/b

Malware Config

Targets

    • Target

      436b4f5121e1244b0eb49ee558b6a52e

    • Size

      78KB

    • MD5

      436b4f5121e1244b0eb49ee558b6a52e

    • SHA1

      810ff57e65d8357c1dd86dfa4c02898b33f4d502

    • SHA256

      2d015441fc98484166fb95ae4f8814ec248344ff501f156e48a8516d9438eeb2

    • SHA512

      e9109e30e5f548ef45876b0a902ded4d33ca8a8468d3e005c72a7b32d779c9e39836ebac03f0462d9273ae0bacec0d84fc6b2e2b1f57d289c641716e2fbc2963

    • SSDEEP

      1536:UHFo6638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtee9/W1P4:UHFo53Ln7N041Qqhgee9/b

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks