Overview

overview

10

Static

static

3

43d84fb82f...0N.exe

windows7-x64

10

43d84fb82f...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43d84fb82f4e865408333aa256513110N.exe

  • Size

    78KB

  • Sample

    240905-yfx6asyflc

  • MD5

    43d84fb82f4e865408333aa256513110

  • SHA1

    026107846f9ad79a0b5c8b3f7142af24db34792d

  • SHA256

    54d9502f9ae9303b4fa791d4a899da3ffbefc09c6c8e77cc085fac559934c1a2

  • SHA512

    4cce0a736bacb1652c609304c006fcf2019239f0b0e6221defae66295f9b7b124dc6e292a87a36e69632c5370b3f70b00321a3049c1e77630cd5f5ed58785035

  • SSDEEP

    1536:dsHHM7t/vZv0kH9gDDtWzYCnJPeoYrGQtf9/+1/N:dsHsh/l0Y9MDYrm7f9/6

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      43d84fb82f4e865408333aa256513110N.exe

    • Size

      78KB

    • MD5

      43d84fb82f4e865408333aa256513110

    • SHA1

      026107846f9ad79a0b5c8b3f7142af24db34792d

    • SHA256

      54d9502f9ae9303b4fa791d4a899da3ffbefc09c6c8e77cc085fac559934c1a2

    • SHA512

      4cce0a736bacb1652c609304c006fcf2019239f0b0e6221defae66295f9b7b124dc6e292a87a36e69632c5370b3f70b00321a3049c1e77630cd5f5ed58785035

    • SSDEEP

      1536:dsHHM7t/vZv0kH9gDDtWzYCnJPeoYrGQtf9/+1/N:dsHsh/l0Y9MDYrm7f9/6

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks