Overview

overview

10

Static

static

3

5c0b9fe702...0N.exe

windows7-x64

10

5c0b9fe702...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c0b9fe7021bede12ecd9604bab26830N

  • Size

    78KB

  • Sample

    240912-3qdxmaseqd

  • MD5

    5c0b9fe7021bede12ecd9604bab26830

  • SHA1

    d10bbe0dc2dc92feae18bb8280dee32e2e721865

  • SHA256

    dcf8f781b2b2bdb2d285efdc3d93bb9ecb17a923eb127b151e31f8eb5b3d810d

  • SHA512

    68870cc62758afb70dbec0cb19db2376306a73757e175a4128beed40ecaf8765e53ecb951dd568417ffcfadfbdc7b901728c4c9bd9c71b82908256e8b7bb262d

  • SSDEEP

    1536:DPy5jqXT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQty6x9/Dy12g:DPy5jSSyRxvhTzXPvCbW2Up9/DI

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      5c0b9fe7021bede12ecd9604bab26830N

    • Size

      78KB

    • MD5

      5c0b9fe7021bede12ecd9604bab26830

    • SHA1

      d10bbe0dc2dc92feae18bb8280dee32e2e721865

    • SHA256

      dcf8f781b2b2bdb2d285efdc3d93bb9ecb17a923eb127b151e31f8eb5b3d810d

    • SHA512

      68870cc62758afb70dbec0cb19db2376306a73757e175a4128beed40ecaf8765e53ecb951dd568417ffcfadfbdc7b901728c4c9bd9c71b82908256e8b7bb262d

    • SSDEEP

      1536:DPy5jqXT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQty6x9/Dy12g:DPy5jSSyRxvhTzXPvCbW2Up9/DI

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks