Overview

overview

10

Static

static

3

308a9960c2...dc.exe

windows7-x64

10

308a9960c2...dc.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    308a9960c21c9c9e088603bd1725ae0f9f31768d0406f80227fc0d04e2ce33dc

  • Size

    78KB

  • Sample

    241022-y9p2savdjj

  • MD5

    8d5b46456adfa1aab109260e6a7c207f

  • SHA1

    60b58d42035e08189a4a83ea10b4636dba6eb160

  • SHA256

    308a9960c21c9c9e088603bd1725ae0f9f31768d0406f80227fc0d04e2ce33dc

  • SHA512

    1ea2107ca9664f9f4958b8122b59c889ebd4cd21e4ee90da67cf8e2be1e3042fdfdefec588f4a14a430a7751a87e80fefa73f726451917af0f154b7d0ac9f24c

  • SSDEEP

    1536:tWtHF3M3xXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtR+9/P1DH:tWtHF83xSyRxvY3md+dWWZyR+9/l

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      308a9960c21c9c9e088603bd1725ae0f9f31768d0406f80227fc0d04e2ce33dc

    • Size

      78KB

    • MD5

      8d5b46456adfa1aab109260e6a7c207f

    • SHA1

      60b58d42035e08189a4a83ea10b4636dba6eb160

    • SHA256

      308a9960c21c9c9e088603bd1725ae0f9f31768d0406f80227fc0d04e2ce33dc

    • SHA512

      1ea2107ca9664f9f4958b8122b59c889ebd4cd21e4ee90da67cf8e2be1e3042fdfdefec588f4a14a430a7751a87e80fefa73f726451917af0f154b7d0ac9f24c

    • SSDEEP

      1536:tWtHF3M3xXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtR+9/P1DH:tWtHF83xSyRxvY3md+dWWZyR+9/l

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks