Overview

overview

10

Static

static

3

8625b0f28c...0N.exe

windows7-x64

10

8625b0f28c...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8625b0f28c93e2023c15826e8edf8a00N

  • Size

    78KB

  • Sample

    240909-s8tqpaydkb

  • MD5

    8625b0f28c93e2023c15826e8edf8a00

  • SHA1

    ac0968ef5eddc3ef0ad22d0b962ca29d48ad34b6

  • SHA256

    4bb90579b4fe648b077f1dd34b10b0539a1503d5c4bf9d89edab047cd76d4738

  • SHA512

    da052466d4b4e88d8f739ae92eb45ce90a96b4b2842c5861eed10d196aed05280f9493e40581c5a4f4d8e49b44548c2628b525d355062bdae1833025fdee17c1

  • SSDEEP

    1536:ZBWV5jSAlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9Qti6l9/cG1im:TWV5jSAtWDDILJLovbicqOq3o+nN9/B

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      8625b0f28c93e2023c15826e8edf8a00N

    • Size

      78KB

    • MD5

      8625b0f28c93e2023c15826e8edf8a00

    • SHA1

      ac0968ef5eddc3ef0ad22d0b962ca29d48ad34b6

    • SHA256

      4bb90579b4fe648b077f1dd34b10b0539a1503d5c4bf9d89edab047cd76d4738

    • SHA512

      da052466d4b4e88d8f739ae92eb45ce90a96b4b2842c5861eed10d196aed05280f9493e40581c5a4f4d8e49b44548c2628b525d355062bdae1833025fdee17c1

    • SSDEEP

      1536:ZBWV5jSAlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9Qti6l9/cG1im:TWV5jSAtWDDILJLovbicqOq3o+nN9/B

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks