Overview

overview

10

Static

static

3

bb3e9c6210...1N.exe

windows7-x64

10

bb3e9c6210...1N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bb3e9c62109f7beb6f598a0016cb879a57185a913adb9ff3e9d854432626a311N.exe

  • Size

    78KB

  • Sample

    241113-wft3jawhnl

  • MD5

    3561e244b008c8870de7d543976bd050

  • SHA1

    ac95a7f6f881505673ac7e7f6c90b205aadade87

  • SHA256

    bb3e9c62109f7beb6f598a0016cb879a57185a913adb9ff3e9d854432626a311

  • SHA512

    4daee7d777207deebbfdd396552ea26edbc616376495fcc46c07cdbf1ba1ddb7a26810a3e8eea4a3ed91710f147b013002dd36659ffbd85cb94a584ccbd26747

  • SSDEEP

    1536:8CHY6M3xXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQte39/n14q:8CHYn3xSyRxvY3md+dWWZye39/F

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      bb3e9c62109f7beb6f598a0016cb879a57185a913adb9ff3e9d854432626a311N.exe

    • Size

      78KB

    • MD5

      3561e244b008c8870de7d543976bd050

    • SHA1

      ac95a7f6f881505673ac7e7f6c90b205aadade87

    • SHA256

      bb3e9c62109f7beb6f598a0016cb879a57185a913adb9ff3e9d854432626a311

    • SHA512

      4daee7d777207deebbfdd396552ea26edbc616376495fcc46c07cdbf1ba1ddb7a26810a3e8eea4a3ed91710f147b013002dd36659ffbd85cb94a584ccbd26747

    • SSDEEP

      1536:8CHY6M3xXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQte39/n14q:8CHYn3xSyRxvY3md+dWWZye39/F

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks