metamorpherrat | 9eeffccf541e56f569707b1c2a44b85738056866f919bd1a93dd3b35423b13a7 | Triage

Sharing

General

Target

9eeffccf541e56f569707b1c2a44b85738056866f919bd1a93dd3b35423b13a7.exe
Size

78KB
Sample

241201-tmjh9szpcn
MD5

26bc9c6cfdc28d2c53a97cb4e78f8140
SHA1

e2f51aea0e5f8f4802647b4e74871ce66f51dfdf
SHA256

9eeffccf541e56f569707b1c2a44b85738056866f919bd1a93dd3b35423b13a7
SHA512

60cd1513cb80b56513b150fcaa757e39670fb1f8ef97f6da9abc50b40b19d19ba34ac589ffacf97fded2afd04f1a4fc156d743fe51753d359222daf7a7c75343
SSDEEP

1536:RsHHuaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtj9/f1GCm:RsH/3DJywQjDgTLopLwdCFJzj9/Tm

Score

10^/10

metamorpherrat discovery rat stealer trojan

Malware Config

Targets

- Target
  
  9eeffccf541e56f569707b1c2a44b85738056866f919bd1a93dd3b35423b13a7.exe
- Size
  
  78KB
- MD5
  
  26bc9c6cfdc28d2c53a97cb4e78f8140
- SHA1
  
  e2f51aea0e5f8f4802647b4e74871ce66f51dfdf
- SHA256
  
  9eeffccf541e56f569707b1c2a44b85738056866f919bd1a93dd3b35423b13a7
- SHA512
  
  60cd1513cb80b56513b150fcaa757e39670fb1f8ef97f6da9abc50b40b19d19ba34ac589ffacf97fded2afd04f1a4fc156d743fe51753d359222daf7a7c75343
- SSDEEP
  
  1536:RsHHuaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtj9/f1GCm:RsH/3DJywQjDgTLopLwdCFJzj9/Tm
Score

10^/10

metamorpherrat discovery rat stealer trojan
- MetamorpherRAT
  Metamorpherrat is a hacking tool that has been around for a while since 2013.
  trojan rat stealer metamorpherrat
- Metamorpherrat family
  metamorpherrat
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Uses the VBS compiler for execution
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

metamorpherratdiscoveryratstealertrojan

behavioral2

metamorpherratdiscoveryratstealertrojan