Overview

overview

10

Static

static

3

ff50a47e57...0N.exe

windows7-x64

10

ff50a47e57...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff50a47e57f3aba9af3d23c7fe1ee9c0N

  • Size

    78KB

  • Sample

    240911-3nnn2szbqr

  • MD5

    ff50a47e57f3aba9af3d23c7fe1ee9c0

  • SHA1

    b1d7b995b1119d7058ac73364ce03553a149010a

  • SHA256

    08bc5e5057aa256fbbafc292a5c1220b1b33cef8c593e75bbed896b3d72d5871

  • SHA512

    487fa2770184c78dd7239c0e2c589e9b9f36677e2e2fbc0a9be65538eb8d8bb439f72be14bf44c4d94c76a4652ec39ade3409f33c906cd39ad12ecbf44ec7e56

  • SSDEEP

    1536:MBWV5jcAlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9Qti6J9/H1SO:2WV5jcAtWDDILJLovbicqOq3o+nx9/f

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      ff50a47e57f3aba9af3d23c7fe1ee9c0N

    • Size

      78KB

    • MD5

      ff50a47e57f3aba9af3d23c7fe1ee9c0

    • SHA1

      b1d7b995b1119d7058ac73364ce03553a149010a

    • SHA256

      08bc5e5057aa256fbbafc292a5c1220b1b33cef8c593e75bbed896b3d72d5871

    • SHA512

      487fa2770184c78dd7239c0e2c589e9b9f36677e2e2fbc0a9be65538eb8d8bb439f72be14bf44c4d94c76a4652ec39ade3409f33c906cd39ad12ecbf44ec7e56

    • SSDEEP

      1536:MBWV5jcAlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9Qti6J9/H1SO:2WV5jcAtWDDILJLovbicqOq3o+nx9/f

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks