Overview

overview

10

Static

static

3

3b1fb02164...88.exe

windows7-x64

10

3b1fb02164...88.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b1fb02164bcd11f00350d501c07496eb737017a92484a0272a76474f66b4088.exe

  • Size

    78KB

  • Sample

    241127-zmg84azlhv

  • MD5

    1a096835dc9f1a35dd3d673d90aa7e70

  • SHA1

    07e5e8aaa36c5962799ccc141ab942418eb28921

  • SHA256

    3b1fb02164bcd11f00350d501c07496eb737017a92484a0272a76474f66b4088

  • SHA512

    c8dc3363e955793bd50820d153e760f831289f71fc52a59e90a55c993d0bf87d19137870c780d62b316bb51e891a5327209c48e3b114de89212709fd49f782d3

  • SSDEEP

    1536:txy5jKpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQti6A9/UT1hsg:Ty5jEJywQjDgTLopLwdCFJzI9/bg

Score
10/10
metamorpherratdiscoveryratstealertrojan

Malware Config

Targets

    • Target

      3b1fb02164bcd11f00350d501c07496eb737017a92484a0272a76474f66b4088.exe

    • Size

      78KB

    • MD5

      1a096835dc9f1a35dd3d673d90aa7e70

    • SHA1

      07e5e8aaa36c5962799ccc141ab942418eb28921

    • SHA256

      3b1fb02164bcd11f00350d501c07496eb737017a92484a0272a76474f66b4088

    • SHA512

      c8dc3363e955793bd50820d153e760f831289f71fc52a59e90a55c993d0bf87d19137870c780d62b316bb51e891a5327209c48e3b114de89212709fd49f782d3

    • SSDEEP

      1536:txy5jKpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQti6A9/UT1hsg:Ty5jEJywQjDgTLopLwdCFJzI9/bg

    Score
    10/10
    metamorpherratdiscoveryratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks