Overview

overview

10

Static

static

3

a23f1009db...3N.exe

windows7-x64

10

a23f1009db...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a23f1009db70be25c317012972f20faaece08a380a60e53be9fc5ffb4d161673N

  • Size

    78KB

  • Sample

    241103-vky2lsylaw

  • MD5

    b384eafb7f17622515730a4e3caf1ed0

  • SHA1

    a4924fbff76142e52e4942d7fc902d7bcf3fb404

  • SHA256

    a23f1009db70be25c317012972f20faaece08a380a60e53be9fc5ffb4d161673

  • SHA512

    fb6a56b2960c9c17c0f03f619270ac57b6f32bce688f346fcf2557ce00b761e98f8560ac54554dcf30df491491a454ceb2c1f7268743fbd949b3d8f5eec88393

  • SSDEEP

    1536:/CHF3JIfpJywt04wbje37TazckwzW4UfSqRovPtoY0BQte49/f1gB:/CHF5IhJywQj2TLo4UJuXHhe49/W

Score
10/10
metamorpherratdiscoveryratstealertrojan

Malware Config

Targets

    • Target

      a23f1009db70be25c317012972f20faaece08a380a60e53be9fc5ffb4d161673N

    • Size

      78KB

    • MD5

      b384eafb7f17622515730a4e3caf1ed0

    • SHA1

      a4924fbff76142e52e4942d7fc902d7bcf3fb404

    • SHA256

      a23f1009db70be25c317012972f20faaece08a380a60e53be9fc5ffb4d161673

    • SHA512

      fb6a56b2960c9c17c0f03f619270ac57b6f32bce688f346fcf2557ce00b761e98f8560ac54554dcf30df491491a454ceb2c1f7268743fbd949b3d8f5eec88393

    • SSDEEP

      1536:/CHF3JIfpJywt04wbje37TazckwzW4UfSqRovPtoY0BQte49/f1gB:/CHF5IhJywQj2TLo4UJuXHhe49/W

    Score
    10/10
    metamorpherratdiscoveryratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks