Overview

overview

10

Static

static

3

7c3b9ce918...8N.exe

windows7-x64

10

7c3b9ce918...8N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7c3b9ce918f610976ece79b564e466439460fef048377f61a7f05ee01a222c68N.exe

  • Size

    78KB

  • Sample

    241201-dfhqdsyqfk

  • MD5

    cdcc0368f411a26e351da32b6644eb60

  • SHA1

    f83a4cba049150b0a956b159ade0eaec7e7f2647

  • SHA256

    7c3b9ce918f610976ece79b564e466439460fef048377f61a7f05ee01a222c68

  • SHA512

    f2d0237caaef8cfb4c2a6c167de52445e3ada405dcfb5ec59395e7f1974fe2350523e45ee6be0aedd256973aba46655230b6eea7aa3221a189961241673e522e

  • SSDEEP

    1536:558wXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtC6B9/W3S1Em:558oSyRxvY3md+dWWZyZ9/Mg

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      7c3b9ce918f610976ece79b564e466439460fef048377f61a7f05ee01a222c68N.exe

    • Size

      78KB

    • MD5

      cdcc0368f411a26e351da32b6644eb60

    • SHA1

      f83a4cba049150b0a956b159ade0eaec7e7f2647

    • SHA256

      7c3b9ce918f610976ece79b564e466439460fef048377f61a7f05ee01a222c68

    • SHA512

      f2d0237caaef8cfb4c2a6c167de52445e3ada405dcfb5ec59395e7f1974fe2350523e45ee6be0aedd256973aba46655230b6eea7aa3221a189961241673e522e

    • SSDEEP

      1536:558wXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQtC6B9/W3S1Em:558oSyRxvY3md+dWWZyZ9/Mg

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks