metamorpherrat | bdbe5fc8ed566a09851b5575d4c21957cd41c03f303175f3902da2d2cef62714 | Triage

Sharing

General

Target

bdbe5fc8ed566a09851b5575d4c21957cd41c03f303175f3902da2d2cef62714
Size

78KB
Sample

241009-db2byawhqr
MD5

940cbf6fc38ae3ed695bd467dcd82a31
SHA1

37dcc728fd377786af00bacadc10ee427c6cee26
SHA256

bdbe5fc8ed566a09851b5575d4c21957cd41c03f303175f3902da2d2cef62714
SHA512

7480a388874546d61a1df263cd35ffa41545b1f712db92a43bffb1cccaa4aa6137aeaa7e0fb8ece873c098087a1519bfa0425b879a794c015a7f3ae435bc5734
SSDEEP

1536:SWtHY6M7t4XT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQtS9/dC1Kc:SWtHYnhASyRxvhTzXPvCbW2US9/e

Score

10^/10

metamorpherrat discovery persistence rat stealer trojan

Malware Config

Targets

- Target
  
  bdbe5fc8ed566a09851b5575d4c21957cd41c03f303175f3902da2d2cef62714
- Size
  
  78KB
- MD5
  
  940cbf6fc38ae3ed695bd467dcd82a31
- SHA1
  
  37dcc728fd377786af00bacadc10ee427c6cee26
- SHA256
  
  bdbe5fc8ed566a09851b5575d4c21957cd41c03f303175f3902da2d2cef62714
- SHA512
  
  7480a388874546d61a1df263cd35ffa41545b1f712db92a43bffb1cccaa4aa6137aeaa7e0fb8ece873c098087a1519bfa0425b879a794c015a7f3ae435bc5734
- SSDEEP
  
  1536:SWtHY6M7t4XT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQtS9/dC1Kc:SWtHYnhASyRxvhTzXPvCbW2US9/e
Score

10^/10

metamorpherrat discovery persistence rat stealer trojan
- MetamorpherRAT
  Metamorpherrat is a hacking tool that has been around for a while since 2013.
  trojan rat stealer metamorpherrat
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Uses the VBS compiler for execution
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metamorpherratdiscoverypersistenceratstealertrojan

behavioral2

discoverypersistence