General

  • Target

    93e10a6664dc9388aeff76f11f1b0bd0N.exe

  • Size

    78KB

  • Sample

    240816-w9pd5szeqb

  • MD5

    93e10a6664dc9388aeff76f11f1b0bd0

  • SHA1

    3b7b0582133c6f71034c01c5a776ced7434715e1

  • SHA256

    251861be5eefa8771116dfb6082715008cb1fcb3c5c06c06354f4716e2f944cb

  • SHA512

    71346139e10339ef44744526d20b3f3e15f0c0cbd4f064decf95a0c22b0576fe151c1d9fd2a60fa3238d2a5049b8abb95db1e22b3f62abb775471f2cf97a60be

  • SSDEEP

    1536:sVe5GpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtt649/41dc:Qe5YJywQjDgTLopLwdCFJzr9/v

Malware Config

Targets

    • Target

      93e10a6664dc9388aeff76f11f1b0bd0N.exe

    • Size

      78KB

    • MD5

      93e10a6664dc9388aeff76f11f1b0bd0

    • SHA1

      3b7b0582133c6f71034c01c5a776ced7434715e1

    • SHA256

      251861be5eefa8771116dfb6082715008cb1fcb3c5c06c06354f4716e2f944cb

    • SHA512

      71346139e10339ef44744526d20b3f3e15f0c0cbd4f064decf95a0c22b0576fe151c1d9fd2a60fa3238d2a5049b8abb95db1e22b3f62abb775471f2cf97a60be

    • SSDEEP

      1536:sVe5GpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtt649/41dc:Qe5YJywQjDgTLopLwdCFJzr9/v

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks