Overview

overview

10

Static

static

3

a8b625b310...ac.exe

windows7-x64

10

a8b625b310...ac.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a8b625b310d054ab06b9457d4af4d03be0517ca065e828d15688f463dee636ac

  • Size

    78KB

  • Sample

    240829-bzx83syfmn

  • MD5

    90c71327124ae0dec4ad0a3aaa915996

  • SHA1

    058a669e7e9ecf72210408098ba409d519a35119

  • SHA256

    a8b625b310d054ab06b9457d4af4d03be0517ca065e828d15688f463dee636ac

  • SHA512

    9a80eb496ca328f1f0c1e8923ff96e380efafbf11b2bc172ebd2a5ad6e53b13d95f97b914aaf87bc389d379686b09e930feee98f3bc8b8780643b4f908abcdcd

  • SSDEEP

    1536:lXPy5QAlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9Qtt6X9/Q1bL:9Py5QAtWDDILJLovbicqOq3o+nU9/6

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      a8b625b310d054ab06b9457d4af4d03be0517ca065e828d15688f463dee636ac

    • Size

      78KB

    • MD5

      90c71327124ae0dec4ad0a3aaa915996

    • SHA1

      058a669e7e9ecf72210408098ba409d519a35119

    • SHA256

      a8b625b310d054ab06b9457d4af4d03be0517ca065e828d15688f463dee636ac

    • SHA512

      9a80eb496ca328f1f0c1e8923ff96e380efafbf11b2bc172ebd2a5ad6e53b13d95f97b914aaf87bc389d379686b09e930feee98f3bc8b8780643b4f908abcdcd

    • SSDEEP

      1536:lXPy5QAlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9Qtt6X9/Q1bL:9Py5QAtWDDILJLovbicqOq3o+nU9/6

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks