General
-
Target
fd971b19abf6d7c500d50ae8c0f781c1a25f1f48e7706f696db5da0b91f2da42
-
Size
78KB
-
Sample
240409-eqebdsec35
-
MD5
47ac43ed2bea438b74c569f67284e2ae
-
SHA1
5ceeb599ae8447b80539eb261bb2c5134fe3ed13
-
SHA256
fd971b19abf6d7c500d50ae8c0f781c1a25f1f48e7706f696db5da0b91f2da42
-
SHA512
eb139a4b7a2bc39b6e2467ba93ba5858479c639e77cba3bdc5aa981bff99e8999205367cdcfe11f8aabfbd5af20e69c36de9e91ac157df817f7b92708566b1e7
-
SSDEEP
1536:LCHY6638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtE9/Uk1mt:LCHY53Ln7N041QqhgE9/+
Static task
static1
Behavioral task
behavioral1
Sample
fd971b19abf6d7c500d50ae8c0f781c1a25f1f48e7706f696db5da0b91f2da42.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd971b19abf6d7c500d50ae8c0f781c1a25f1f48e7706f696db5da0b91f2da42.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
fd971b19abf6d7c500d50ae8c0f781c1a25f1f48e7706f696db5da0b91f2da42
-
Size
78KB
-
MD5
47ac43ed2bea438b74c569f67284e2ae
-
SHA1
5ceeb599ae8447b80539eb261bb2c5134fe3ed13
-
SHA256
fd971b19abf6d7c500d50ae8c0f781c1a25f1f48e7706f696db5da0b91f2da42
-
SHA512
eb139a4b7a2bc39b6e2467ba93ba5858479c639e77cba3bdc5aa981bff99e8999205367cdcfe11f8aabfbd5af20e69c36de9e91ac157df817f7b92708566b1e7
-
SSDEEP
1536:LCHY6638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtE9/Uk1mt:LCHY53Ln7N041QqhgE9/+
Score10/10-
MetamorpherRAT
Metamorpherrat is a hacking tool that has been around for a while since 2013.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-