General
-
Target
a3101fce422da2346f11a205c5a031672fb6f16645b28e3ec682dd1cd118bfbd
-
Size
78KB
-
Sample
241223-b2vwqstlcy
-
MD5
2664fd9c6f4053b0d0d49e77f0b73687
-
SHA1
30897c778058572cbd9e6c9db62db4bddf0ed9f9
-
SHA256
a3101fce422da2346f11a205c5a031672fb6f16645b28e3ec682dd1cd118bfbd
-
SHA512
6b3ac294048242896e8e55eeee1ab7ba53cec80a7444a99271945d98265143e5c6da16c8ee2d144f25f70f931665873ed0ce31c94286a927468fd7a9ed7e83e6
-
SSDEEP
1536:XXgy5jPvZv0kH9gDDtWzYCnJPeoYrGQtN6I9/W1DR:gy5jPl0Y9MDYrm7n9/2
Static task
static1
Behavioral task
behavioral1
Sample
a3101fce422da2346f11a205c5a031672fb6f16645b28e3ec682dd1cd118bfbd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a3101fce422da2346f11a205c5a031672fb6f16645b28e3ec682dd1cd118bfbd.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
a3101fce422da2346f11a205c5a031672fb6f16645b28e3ec682dd1cd118bfbd
-
Size
78KB
-
MD5
2664fd9c6f4053b0d0d49e77f0b73687
-
SHA1
30897c778058572cbd9e6c9db62db4bddf0ed9f9
-
SHA256
a3101fce422da2346f11a205c5a031672fb6f16645b28e3ec682dd1cd118bfbd
-
SHA512
6b3ac294048242896e8e55eeee1ab7ba53cec80a7444a99271945d98265143e5c6da16c8ee2d144f25f70f931665873ed0ce31c94286a927468fd7a9ed7e83e6
-
SSDEEP
1536:XXgy5jPvZv0kH9gDDtWzYCnJPeoYrGQtN6I9/W1DR:gy5jPl0Y9MDYrm7n9/2
-
MetamorpherRAT
Metamorpherrat is a hacking tool that has been around for a while since 2013.
-
Metamorpherrat family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-