Overview

overview

10

Static

static

3

9b7cf938b9...4N.exe

windows7-x64

10

9b7cf938b9...4N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b7cf938b99a7aa201d4f3955941fcab57d8991de49a3e72150268d74d190de4N.exe

  • Size

    78KB

  • Sample

    241113-a5tbmstfkg

  • MD5

    b747158e23a0fea4441da26bf0aa6640

  • SHA1

    f9688cabec432f1f88eb5d1c7f123ad5df1f05f4

  • SHA256

    9b7cf938b99a7aa201d4f3955941fcab57d8991de49a3e72150268d74d190de4

  • SHA512

    ab66a528060c7078c2c17b14d8fc32b4ded0d27e7f258fbc08a3147af2242b2f31cd54c6688839352ddd21713e5a20c228bf7a245cfae0d111107fc5f2771f3a

  • SSDEEP

    1536:Je5jSgpJywt04wbje37TazckwzW4UfSqRovPtoY0BQtC6R9/nb1iH:Je5jSeJywQj2TLo4UJuXHhZ9/nm

Score
10/10
metamorpherratdiscoveryratstealertrojan

Malware Config

Targets

    • Target

      9b7cf938b99a7aa201d4f3955941fcab57d8991de49a3e72150268d74d190de4N.exe

    • Size

      78KB

    • MD5

      b747158e23a0fea4441da26bf0aa6640

    • SHA1

      f9688cabec432f1f88eb5d1c7f123ad5df1f05f4

    • SHA256

      9b7cf938b99a7aa201d4f3955941fcab57d8991de49a3e72150268d74d190de4

    • SHA512

      ab66a528060c7078c2c17b14d8fc32b4ded0d27e7f258fbc08a3147af2242b2f31cd54c6688839352ddd21713e5a20c228bf7a245cfae0d111107fc5f2771f3a

    • SSDEEP

      1536:Je5jSgpJywt04wbje37TazckwzW4UfSqRovPtoY0BQtC6R9/nb1iH:Je5jSeJywQj2TLo4UJuXHhZ9/nm

    Score
    10/10
    metamorpherratdiscoveryratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks