Overview

overview

10

Static

static

3

a56f655d40...af.exe

windows7-x64

10

a56f655d40...af.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a56f655d40d652e5e0d7c9cfa6969c5339eaf5ae93f4e786b99d492a6fedc6af

  • Size

    78KB

  • Sample

    240908-a6lyysxcpf

  • MD5

    f05fb2946ceaebb6dadf5c184b07e74e

  • SHA1

    f2211cefd8e7f36694b8a05c1a15969be8da13e5

  • SHA256

    a56f655d40d652e5e0d7c9cfa6969c5339eaf5ae93f4e786b99d492a6fedc6af

  • SHA512

    931b662fd4d705f3585007bc265d4376faf65afeef0a0dd575c86e9f864c5a6333cc6ee9d054287bb3a0a7e54469b3b63f3a938f4c284597db0a296722d22d19

  • SSDEEP

    1536:3xy55AlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9QtS6OI9/LP1zk:By55AtWDDILJLovbicqOq3o+nV9/C

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      a56f655d40d652e5e0d7c9cfa6969c5339eaf5ae93f4e786b99d492a6fedc6af

    • Size

      78KB

    • MD5

      f05fb2946ceaebb6dadf5c184b07e74e

    • SHA1

      f2211cefd8e7f36694b8a05c1a15969be8da13e5

    • SHA256

      a56f655d40d652e5e0d7c9cfa6969c5339eaf5ae93f4e786b99d492a6fedc6af

    • SHA512

      931b662fd4d705f3585007bc265d4376faf65afeef0a0dd575c86e9f864c5a6333cc6ee9d054287bb3a0a7e54469b3b63f3a938f4c284597db0a296722d22d19

    • SSDEEP

      1536:3xy55AlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9QtS6OI9/LP1zk:By55AtWDDILJLovbicqOq3o+nV9/C

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks