Overview

overview

10

Static

static

3

b04b226e4b...f1.exe

windows7-x64

10

b04b226e4b...f1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b04b226e4bbb37019a227cf307c6d46e85434ae5b012cedb8d0c1e6146d50ef1

  • Size

    78KB

  • Sample

    240919-bf8kpssgla

  • MD5

    296a07805f3f2cae974641a530bed1dc

  • SHA1

    ff2c086d83740693c9b6497b83910e78a087e895

  • SHA256

    b04b226e4bbb37019a227cf307c6d46e85434ae5b012cedb8d0c1e6146d50ef1

  • SHA512

    98d64c1e6d128749c2305023ff4bbfaf0435104c540d2990b593c6e88aa136787550dc8b26f4471f0fe353d54c1c7d84603971f68e4ca8fe3e3e5ed76af1842e

  • SSDEEP

    1536:ny5jIXT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQtC6n9/u15v:ny5jQSyRxvhTzXPvCbW2Uv9/i

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      b04b226e4bbb37019a227cf307c6d46e85434ae5b012cedb8d0c1e6146d50ef1

    • Size

      78KB

    • MD5

      296a07805f3f2cae974641a530bed1dc

    • SHA1

      ff2c086d83740693c9b6497b83910e78a087e895

    • SHA256

      b04b226e4bbb37019a227cf307c6d46e85434ae5b012cedb8d0c1e6146d50ef1

    • SHA512

      98d64c1e6d128749c2305023ff4bbfaf0435104c540d2990b593c6e88aa136787550dc8b26f4471f0fe353d54c1c7d84603971f68e4ca8fe3e3e5ed76af1842e

    • SSDEEP

      1536:ny5jIXT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQtC6n9/u15v:ny5jQSyRxvhTzXPvCbW2Uv9/i

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks