General

  • Target

    e7e1c0f58c1a7339b56fb59eb88d5b72add931c37a333680ba12182723c5c76eN

  • Size

    78KB

  • Sample

    241104-mh3ysayhll

  • MD5

    083e1caa9f36b4d52f87cff1c12846d0

  • SHA1

    ace541deffacdd8caa7dbeb33c9eb540065fb346

  • SHA256

    e7e1c0f58c1a7339b56fb59eb88d5b72add931c37a333680ba12182723c5c76e

  • SHA512

    60cb4a22930de024052ded13b60edbf411b2ee3260ac712210cdcd7459f3a69cdc5aead90f98a838a52969016f39d0bd717c113a3c892a33ea1000a8108e0fac

  • SSDEEP

    1536:ayV5jS2pJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQti6F9/y1XI:3V5jSoJywQjDgTLopLwdCFJzN9//

Malware Config

Targets

    • Target

      e7e1c0f58c1a7339b56fb59eb88d5b72add931c37a333680ba12182723c5c76eN

    • Size

      78KB

    • MD5

      083e1caa9f36b4d52f87cff1c12846d0

    • SHA1

      ace541deffacdd8caa7dbeb33c9eb540065fb346

    • SHA256

      e7e1c0f58c1a7339b56fb59eb88d5b72add931c37a333680ba12182723c5c76e

    • SHA512

      60cb4a22930de024052ded13b60edbf411b2ee3260ac712210cdcd7459f3a69cdc5aead90f98a838a52969016f39d0bd717c113a3c892a33ea1000a8108e0fac

    • SSDEEP

      1536:ayV5jS2pJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQti6F9/y1XI:3V5jSoJywQjDgTLopLwdCFJzN9//

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Metamorpherrat family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

MITRE ATT&CK Enterprise v15

Tasks