Overview

overview

10

Static

static

3

2fc8516122...9N.exe

windows7-x64

10

2fc8516122...9N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2fc8516122040a32de055da40082df181ac5ffe246ab8118c552375dd9b73699N

  • Size

    78KB

  • Sample

    241027-qat8fsvqgq

  • MD5

    4a2966b481f738097e4c0a574ed70d00

  • SHA1

    94b17490616dbc1499ea0e0ee39f43eb4f709615

  • SHA256

    2fc8516122040a32de055da40082df181ac5ffe246ab8118c552375dd9b73699

  • SHA512

    bc8e321b039c23a64fd55743a3cad9f29f0fd53e258231b107988ae6761698de12c83a8d229108cab612cbd43d39a8f2195a567be5fea85868fba4ee81f256c2

  • SSDEEP

    1536:6tHHM7t4XT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQtwF9/jM1uQ:6tHshASyRxvhTzXPvCbW2UwF9/m

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      2fc8516122040a32de055da40082df181ac5ffe246ab8118c552375dd9b73699N

    • Size

      78KB

    • MD5

      4a2966b481f738097e4c0a574ed70d00

    • SHA1

      94b17490616dbc1499ea0e0ee39f43eb4f709615

    • SHA256

      2fc8516122040a32de055da40082df181ac5ffe246ab8118c552375dd9b73699

    • SHA512

      bc8e321b039c23a64fd55743a3cad9f29f0fd53e258231b107988ae6761698de12c83a8d229108cab612cbd43d39a8f2195a567be5fea85868fba4ee81f256c2

    • SSDEEP

      1536:6tHHM7t4XT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQtwF9/jM1uQ:6tHshASyRxvhTzXPvCbW2UwF9/m

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks