Overview

overview

10

Static

static

3

07b0d26c49...0N.exe

windows7-x64

7

07b0d26c49...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07b0d26c490fd016762b6e29ec9ada80N.exe

  • Size

    78KB

  • Sample

    240818-ba5lvszbjm

  • MD5

    07b0d26c490fd016762b6e29ec9ada80

  • SHA1

    ea5bd98592644db8033e46c0ef226c7214cbc527

  • SHA256

    2d4786fd73a07c8a7427f99bd60f5d0d8bc13d4bb1d03846df85128720609893

  • SHA512

    17e2da8ba91aa88957899399ee12416e48ac51979d0f5992305c74baffcb60d7c9e61ec85822cfac14a4cf14965e9c591b34e5492eeaef90fcc38bb7754acd43

  • SSDEEP

    1536:3PCHFo6638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQt19/91qQ:3PCHFo53Ln7N041Qqhg19/T

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      07b0d26c490fd016762b6e29ec9ada80N.exe

    • Size

      78KB

    • MD5

      07b0d26c490fd016762b6e29ec9ada80

    • SHA1

      ea5bd98592644db8033e46c0ef226c7214cbc527

    • SHA256

      2d4786fd73a07c8a7427f99bd60f5d0d8bc13d4bb1d03846df85128720609893

    • SHA512

      17e2da8ba91aa88957899399ee12416e48ac51979d0f5992305c74baffcb60d7c9e61ec85822cfac14a4cf14965e9c591b34e5492eeaef90fcc38bb7754acd43

    • SSDEEP

      1536:3PCHFo6638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQt19/91qQ:3PCHFo53Ln7N041Qqhg19/T

    Score
    10/10
    discoverypersistencemetamorpherratratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks