Overview

overview

10

Static

static

3

a8bd0acdb1...0N.exe

windows7-x64

10

a8bd0acdb1...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a8bd0acdb13aee54429dfd7d985d6738e9e93b7397e0a757f217c6a973388340N.exe

  • Size

    78KB

  • Sample

    241204-a7vmgsylgn

  • MD5

    5235500e363d99a2357d42af891788e0

  • SHA1

    b7530f2ae1ec9b8d1f46c4079465321b6b3f94b5

  • SHA256

    a8bd0acdb13aee54429dfd7d985d6738e9e93b7397e0a757f217c6a973388340

  • SHA512

    7dee4e60287e5518cdc5ca46cab80513579222f28f2a96d93e9fb7b1d9430b1af7cebade58d4e21ce87e986eea9f227c155e0f9af36d37148f5e713373a79e62

  • SSDEEP

    1536:CsHHuaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtkB9//1CY:CsH/3DJywQjDgTLopLwdCFJzkB9/d

Score
10/10
metamorpherratdiscoveryratstealertrojan

Malware Config

Targets

    • Target

      a8bd0acdb13aee54429dfd7d985d6738e9e93b7397e0a757f217c6a973388340N.exe

    • Size

      78KB

    • MD5

      5235500e363d99a2357d42af891788e0

    • SHA1

      b7530f2ae1ec9b8d1f46c4079465321b6b3f94b5

    • SHA256

      a8bd0acdb13aee54429dfd7d985d6738e9e93b7397e0a757f217c6a973388340

    • SHA512

      7dee4e60287e5518cdc5ca46cab80513579222f28f2a96d93e9fb7b1d9430b1af7cebade58d4e21ce87e986eea9f227c155e0f9af36d37148f5e713373a79e62

    • SSDEEP

      1536:CsHHuaJtVpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtkB9//1CY:CsH/3DJywQjDgTLopLwdCFJzkB9/d

    Score
    10/10
    metamorpherratdiscoveryratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks