Overview

overview

10

Static

static

3

76446404eb...7N.exe

windows7-x64

10

76446404eb...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76446404eb3d02828f0fcb358747b161b7ced794206bd82cae2afb840bfa5137N

  • Size

    78KB

  • Sample

    241030-nwphzs1ngx

  • MD5

    4bace1dc2a9db3db9638238233a29b60

  • SHA1

    d4c157c6542dcb06b43f897a6926341772176165

  • SHA256

    76446404eb3d02828f0fcb358747b161b7ced794206bd82cae2afb840bfa5137

  • SHA512

    e330d7485d5a028fb69fc5b76a47c3cdfef660cf9edac4191e07d35da5aca3b10f7bd822606e22bb0d17ad4883784bf11555ff9d63d02d13d32b99baa4ebcdb7

  • SSDEEP

    1536:HPy58MLT8hn2Ep7WzPdVj6Ju8B3AZ242UdIAkD4x3HT4hPVoYdVQtP6R9/U1wA:HPy586E2EwR4uY41HyvYg9/Y

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      76446404eb3d02828f0fcb358747b161b7ced794206bd82cae2afb840bfa5137N

    • Size

      78KB

    • MD5

      4bace1dc2a9db3db9638238233a29b60

    • SHA1

      d4c157c6542dcb06b43f897a6926341772176165

    • SHA256

      76446404eb3d02828f0fcb358747b161b7ced794206bd82cae2afb840bfa5137

    • SHA512

      e330d7485d5a028fb69fc5b76a47c3cdfef660cf9edac4191e07d35da5aca3b10f7bd822606e22bb0d17ad4883784bf11555ff9d63d02d13d32b99baa4ebcdb7

    • SSDEEP

      1536:HPy58MLT8hn2Ep7WzPdVj6Ju8B3AZ242UdIAkD4x3HT4hPVoYdVQtP6R9/U1wA:HPy586E2EwR4uY41HyvYg9/Y

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks