thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Advanced

Metamorphic Malware

Malware that rewrites its own code on each propagation so no two copies share the same instructions.

Definition

Metamorphic malware uses techniques such as instruction substitution, register swapping, code transposition and junk code insertion to produce functionally equivalent but structurally different variants. Unlike polymorphic malware, it has no constant decryptor to signature. Behavioral detection is required.

Example

A worm that reorders its functions and swaps equivalent instructions every time it spreads.

Exam tip

Polymorphic = encrypts and mutates the wrapper; metamorphic = rewrites the whole body.

Related terms