Overview

overview

10

Static

static

3

4215322886...0N.exe

windows7-x64

10

4215322886...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    42153228868d7e181eba1f65682f8e30N.exe

  • Size

    78KB

  • Sample

    240728-dtynrsycrc

  • MD5

    42153228868d7e181eba1f65682f8e30

  • SHA1

    5d88cb94379e824723a40d06b2fc98d16a9f349f

  • SHA256

    170b5f7340d0fd7b6377fe333e0a0abe95cff3ad14fd192a2159664f53ff2785

  • SHA512

    a0d0b97e0e976c2dde1fa5ff14efa775a4c6d85b87c28362f0aaf8d95effcd1dc038df9582ff79f2ed7232c0743792454c822263dcebd100eff63efb4ea8dccb

  • SSDEEP

    1536:i5jSBXT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQtC6739/81Cp:i5jSBSyRxvhTzXPvCbW2Uj39/P

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      42153228868d7e181eba1f65682f8e30N.exe

    • Size

      78KB

    • MD5

      42153228868d7e181eba1f65682f8e30

    • SHA1

      5d88cb94379e824723a40d06b2fc98d16a9f349f

    • SHA256

      170b5f7340d0fd7b6377fe333e0a0abe95cff3ad14fd192a2159664f53ff2785

    • SHA512

      a0d0b97e0e976c2dde1fa5ff14efa775a4c6d85b87c28362f0aaf8d95effcd1dc038df9582ff79f2ed7232c0743792454c822263dcebd100eff63efb4ea8dccb

    • SSDEEP

      1536:i5jSBXT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQtC6739/81Cp:i5jSBSyRxvhTzXPvCbW2Uj39/P

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks