General

  • Target

    fd971b19abf6d7c500d50ae8c0f781c1a25f1f48e7706f696db5da0b91f2da42

  • Size

    78KB

  • Sample

    240409-eqebdsec35

  • MD5

    47ac43ed2bea438b74c569f67284e2ae

  • SHA1

    5ceeb599ae8447b80539eb261bb2c5134fe3ed13

  • SHA256

    fd971b19abf6d7c500d50ae8c0f781c1a25f1f48e7706f696db5da0b91f2da42

  • SHA512

    eb139a4b7a2bc39b6e2467ba93ba5858479c639e77cba3bdc5aa981bff99e8999205367cdcfe11f8aabfbd5af20e69c36de9e91ac157df817f7b92708566b1e7

  • SSDEEP

    1536:LCHY6638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtE9/Uk1mt:LCHY53Ln7N041QqhgE9/+

Malware Config

Targets

    • Target

      fd971b19abf6d7c500d50ae8c0f781c1a25f1f48e7706f696db5da0b91f2da42

    • Size

      78KB

    • MD5

      47ac43ed2bea438b74c569f67284e2ae

    • SHA1

      5ceeb599ae8447b80539eb261bb2c5134fe3ed13

    • SHA256

      fd971b19abf6d7c500d50ae8c0f781c1a25f1f48e7706f696db5da0b91f2da42

    • SHA512

      eb139a4b7a2bc39b6e2467ba93ba5858479c639e77cba3bdc5aa981bff99e8999205367cdcfe11f8aabfbd5af20e69c36de9e91ac157df817f7b92708566b1e7

    • SSDEEP

      1536:LCHY6638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtE9/Uk1mt:LCHY53Ln7N041QqhgE9/+

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks