Overview

overview

10

Static

static

3

3d5ffb4475...0e.exe

windows7-x64

10

3d5ffb4475...0e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3d5ffb4475cf0bd964711cfd63751cdb0607af8bfbae3ed87e441a297f89450e

  • Size

    78KB

  • Sample

    240913-zjcjfaycpg

  • MD5

    2fbeb1fee60c9fe58950b89334045d4a

  • SHA1

    490d9c0c998fd52530bf6b7fe059dfe3f800476b

  • SHA256

    3d5ffb4475cf0bd964711cfd63751cdb0607af8bfbae3ed87e441a297f89450e

  • SHA512

    d9390d1279434c5c58826885dee464c403f3c959b95ad938de74d7a75c424c4725ecd0b13afa3700a23c06bab302fae6f3f77aa9a5b6ab616f68b0f40854bba1

  • SSDEEP

    1536:OCHFo6M7t4XT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQt1B9/k1PB:OCHFonhASyRxvhTzXPvCbW2U1B9/Q

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      3d5ffb4475cf0bd964711cfd63751cdb0607af8bfbae3ed87e441a297f89450e

    • Size

      78KB

    • MD5

      2fbeb1fee60c9fe58950b89334045d4a

    • SHA1

      490d9c0c998fd52530bf6b7fe059dfe3f800476b

    • SHA256

      3d5ffb4475cf0bd964711cfd63751cdb0607af8bfbae3ed87e441a297f89450e

    • SHA512

      d9390d1279434c5c58826885dee464c403f3c959b95ad938de74d7a75c424c4725ecd0b13afa3700a23c06bab302fae6f3f77aa9a5b6ab616f68b0f40854bba1

    • SSDEEP

      1536:OCHFo6M7t4XT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQt1B9/k1PB:OCHFonhASyRxvhTzXPvCbW2U1B9/Q

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks