metamorpherrat | bee7752564edc02154aaffd93b63a4c571c6b9d3b5ab79424d185d839d01561c | Triage

Sharing

General

Target

bee7752564edc02154aaffd93b63a4c571c6b9d3b5ab79424d185d839d01561c
Size

78KB
Sample

241108-d65b3sxlbj
MD5

830e8e605c1bd897bc008f5c49c02802
SHA1

98a5e871f2f41bc702091a00f84980571020013f
SHA256

bee7752564edc02154aaffd93b63a4c571c6b9d3b5ab79424d185d839d01561c
SHA512

8720d93cb8f0e41e8524810c1096bd28ade95fe8f6789f8059db71daf1af84bd5228be72bc6a14270d86b3430e3327c44e3095fc1270549699245bbf650163a6
SSDEEP

1536:hHFo6uaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQte9/c1Xd:hHFoI3DJywQjDgTLopLwdCFJze9/Q

Score

10^/10

metamorpherrat discovery rat stealer trojan

Malware Config

Targets

- Target
  
  bee7752564edc02154aaffd93b63a4c571c6b9d3b5ab79424d185d839d01561c
- Size
  
  78KB
- MD5
  
  830e8e605c1bd897bc008f5c49c02802
- SHA1
  
  98a5e871f2f41bc702091a00f84980571020013f
- SHA256
  
  bee7752564edc02154aaffd93b63a4c571c6b9d3b5ab79424d185d839d01561c
- SHA512
  
  8720d93cb8f0e41e8524810c1096bd28ade95fe8f6789f8059db71daf1af84bd5228be72bc6a14270d86b3430e3327c44e3095fc1270549699245bbf650163a6
- SSDEEP
  
  1536:hHFo6uaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQte9/c1Xd:hHFoI3DJywQjDgTLopLwdCFJze9/Q
Score

10^/10

metamorpherrat discovery rat stealer trojan
- MetamorpherRAT
  Metamorpherrat is a hacking tool that has been around for a while since 2013.
  trojan rat stealer metamorpherrat
- Metamorpherrat family
  metamorpherrat
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Uses the VBS compiler for execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metamorpherratdiscoveryratstealertrojan

behavioral2

metamorpherratdiscoveryratstealertrojan