Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e6806de448...ce.exe

windows7-x64

10

e6806de448...ce.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e6806de448ff52ea2c78106fd0022ac06becee89011484b4a779eb701f4009ce

  • Size

    78KB

  • Sample

    250303-gp398syzfy

  • MD5

    456c1ad72e09f02d88e6ab78d6ce43f4

  • SHA1

    49e1e1e8180c54c9a8900592462a5acff2d78df4

  • SHA256

    e6806de448ff52ea2c78106fd0022ac06becee89011484b4a779eb701f4009ce

  • SHA512

    df660ad128a8bb6d43a48e804e75b17273bd959679a740b2e8ab82f348d6f26e5cfebeb3d22b12af57841c612b936756bee3204902f8be3b00f0340d3f877b61

  • SSDEEP

    1536:sPWtHFo6M7t/vZv0kH9gDDtWzYCnJPeoYrGQtQ9/01pg:sPWtHFonh/l0Y9MDYrm7Q9/L

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      e6806de448ff52ea2c78106fd0022ac06becee89011484b4a779eb701f4009ce

    • Size

      78KB

    • MD5

      456c1ad72e09f02d88e6ab78d6ce43f4

    • SHA1

      49e1e1e8180c54c9a8900592462a5acff2d78df4

    • SHA256

      e6806de448ff52ea2c78106fd0022ac06becee89011484b4a779eb701f4009ce

    • SHA512

      df660ad128a8bb6d43a48e804e75b17273bd959679a740b2e8ab82f348d6f26e5cfebeb3d22b12af57841c612b936756bee3204902f8be3b00f0340d3f877b61

    • SSDEEP

      1536:sPWtHFo6M7t/vZv0kH9gDDtWzYCnJPeoYrGQtQ9/01pg:sPWtHFonh/l0Y9MDYrm7Q9/L

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Metamorpherrat family

      metamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks