General

  • Target

    84e4af3141c4675d842a3e150f677c15e83e83ffc784e54229539ba3736f9688N.exe

  • Size

    78KB

  • Sample

    241116-y3wwrasmav

  • MD5

    af28bdd8bf62d0d34551844946219640

  • SHA1

    950afc503e6075605a77e1214941eaceb3560dfb

  • SHA256

    84e4af3141c4675d842a3e150f677c15e83e83ffc784e54229539ba3736f9688

  • SHA512

    b4b2868a70c3532fcc3036dfca159c5f2c5786ee039904c8f8a6bfbc6e3049ae5314ffd615668acfc40fe1d8e1c83583bdf3542e92a6c6601d16f0a59d915cf0

  • SSDEEP

    1536:2XRWV5TAlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9Qti6N9/o1SA:uRWV5TAtWDDILJLovbicqOq3o+nF9/e

Malware Config

Targets

    • Target

      84e4af3141c4675d842a3e150f677c15e83e83ffc784e54229539ba3736f9688N.exe

    • Size

      78KB

    • MD5

      af28bdd8bf62d0d34551844946219640

    • SHA1

      950afc503e6075605a77e1214941eaceb3560dfb

    • SHA256

      84e4af3141c4675d842a3e150f677c15e83e83ffc784e54229539ba3736f9688

    • SHA512

      b4b2868a70c3532fcc3036dfca159c5f2c5786ee039904c8f8a6bfbc6e3049ae5314ffd615668acfc40fe1d8e1c83583bdf3542e92a6c6601d16f0a59d915cf0

    • SSDEEP

      1536:2XRWV5TAlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9Qti6N9/o1SA:uRWV5TAtWDDILJLovbicqOq3o+nF9/e

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Metamorpherrat family

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks