Overview

overview

10

Static

static

3

baaf54b05f...2N.exe

windows7-x64

10

baaf54b05f...2N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    baaf54b05f102a10e3dd0e44c11c988fc97cc5e796ca631378b7e4f25715e712N.exe

  • Size

    78KB

  • Sample

    241206-cxj44s1ncp

  • MD5

    35419f1ef04bb0f1b76f9b96f3f8ce10

  • SHA1

    1557d4d09d9f56d81035a65b331189b845dc81c1

  • SHA256

    baaf54b05f102a10e3dd0e44c11c988fc97cc5e796ca631378b7e4f25715e712

  • SHA512

    90300c711954f902017af6252dd4d77c4a73b2cbcb472b3eff5508d86b3ef81636493ac860ad5f0323c9e29b0f806d62b815be658c73f16ca4f95810bfdcdbeb

  • SSDEEP

    1536:VHF3M7t4XT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQtz9/l1QXF:VHF8hASyRxvhTzXPvCbW2Uz9/4V

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      baaf54b05f102a10e3dd0e44c11c988fc97cc5e796ca631378b7e4f25715e712N.exe

    • Size

      78KB

    • MD5

      35419f1ef04bb0f1b76f9b96f3f8ce10

    • SHA1

      1557d4d09d9f56d81035a65b331189b845dc81c1

    • SHA256

      baaf54b05f102a10e3dd0e44c11c988fc97cc5e796ca631378b7e4f25715e712

    • SHA512

      90300c711954f902017af6252dd4d77c4a73b2cbcb472b3eff5508d86b3ef81636493ac860ad5f0323c9e29b0f806d62b815be658c73f16ca4f95810bfdcdbeb

    • SSDEEP

      1536:VHF3M7t4XT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQtz9/l1QXF:VHF8hASyRxvhTzXPvCbW2Uz9/4V

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks