Overview

overview

10

Static

static

3

d06b61e67b...0N.exe

windows7-x64

10

d06b61e67b...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d06b61e67bd51d8aaefe7f6f70d6f3b0bbf28ac751c45e2be86374e4ece1fdd0N

  • Size

    78KB

  • Sample

    241103-ynapzasgnc

  • MD5

    92cfc5ea9fb90ef75c1332b239f901b0

  • SHA1

    5b8afe92cd629812038078ec3902683bbc568b92

  • SHA256

    d06b61e67bd51d8aaefe7f6f70d6f3b0bbf28ac751c45e2be86374e4ece1fdd0

  • SHA512

    5286a497bb2a7ef04d7b115ba101e52f58b0e33c5e7c7c80c779f102a723259ab2b7bbe756ee371d6f03a701580d1eee163a325bd647ed10f4fafd0ba365c2af

  • SSDEEP

    1536:b58gpJywt04wbje37TazckwzW4UfSqRovPtoY0BQtN669/fk1hR:b58eJywQj2TLo4UJuXHhJ9/fy

Score
10/10
metamorpherratdiscoveryratstealertrojan

Malware Config

Targets

    • Target

      d06b61e67bd51d8aaefe7f6f70d6f3b0bbf28ac751c45e2be86374e4ece1fdd0N

    • Size

      78KB

    • MD5

      92cfc5ea9fb90ef75c1332b239f901b0

    • SHA1

      5b8afe92cd629812038078ec3902683bbc568b92

    • SHA256

      d06b61e67bd51d8aaefe7f6f70d6f3b0bbf28ac751c45e2be86374e4ece1fdd0

    • SHA512

      5286a497bb2a7ef04d7b115ba101e52f58b0e33c5e7c7c80c779f102a723259ab2b7bbe756ee371d6f03a701580d1eee163a325bd647ed10f4fafd0ba365c2af

    • SSDEEP

      1536:b58gpJywt04wbje37TazckwzW4UfSqRovPtoY0BQtN669/fk1hR:b58eJywQj2TLo4UJuXHhJ9/fy

    Score
    10/10
    metamorpherratdiscoveryratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks