Overview

overview

10

Static

static

3

bfe8038d77...57.exe

windows7-x64

10

bfe8038d77...57.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bfe8038d77f9eac20a942d13cabaeab52ae1e6aa2bf38bd5fc9730cb441e6d57

  • Size

    78KB

  • Sample

    241212-cyssmssjbp

  • MD5

    4c0e7335774001ac719761c8a5a747d6

  • SHA1

    b11527c1ed0630a86c7c33f8834c3add90d51b9d

  • SHA256

    bfe8038d77f9eac20a942d13cabaeab52ae1e6aa2bf38bd5fc9730cb441e6d57

  • SHA512

    ba146ce7de02c4c1e693bc8f8bf82aea688f3af1c28cebaba9d0834a959c4eedfb93c9e8056208c1341fde9c3b42150ee2846a89fd698338a2f9858b41c10990

  • SSDEEP

    1536:oSV5Ody0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtC6O9/r1fD:oSV55n7N041Qqhg29/B

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      bfe8038d77f9eac20a942d13cabaeab52ae1e6aa2bf38bd5fc9730cb441e6d57

    • Size

      78KB

    • MD5

      4c0e7335774001ac719761c8a5a747d6

    • SHA1

      b11527c1ed0630a86c7c33f8834c3add90d51b9d

    • SHA256

      bfe8038d77f9eac20a942d13cabaeab52ae1e6aa2bf38bd5fc9730cb441e6d57

    • SHA512

      ba146ce7de02c4c1e693bc8f8bf82aea688f3af1c28cebaba9d0834a959c4eedfb93c9e8056208c1341fde9c3b42150ee2846a89fd698338a2f9858b41c10990

    • SSDEEP

      1536:oSV5Ody0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQtC6O9/r1fD:oSV55n7N041Qqhg29/B

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks