General

  • Target

    e29c065b3cc8cf0d428ba543285c903c_JaffaCakes118

  • Size

    78KB

  • Sample

    240406-qb91asba2y

  • MD5

    e29c065b3cc8cf0d428ba543285c903c

  • SHA1

    a1ea91c8eedaa2f4f1851574eabfd686e8830fa7

  • SHA256

    621d30c45f2c271f2b5dc84fd0b4e1998e7a78cdce4dcf0abac93795c83a26a9

  • SHA512

    31a0b365ddc3d0e070addce178747f990504c6e2661f515bcd9b54fd4f88c956585c2bd4df4788e5e16b4bb5d51246911f81dccac38817f7d51b383fa4a6c60c

  • SSDEEP

    1536:aCHFo6JIdXT0XRhyRjVf3HaXOJR0zcEIvCZ1xjs9np/IPioYJbQtH9/sP1+C:aCHFoOINSyRxvHF5vCbxwpI6WH9/s/

Malware Config

Targets

    • Target

      e29c065b3cc8cf0d428ba543285c903c_JaffaCakes118

    • Size

      78KB

    • MD5

      e29c065b3cc8cf0d428ba543285c903c

    • SHA1

      a1ea91c8eedaa2f4f1851574eabfd686e8830fa7

    • SHA256

      621d30c45f2c271f2b5dc84fd0b4e1998e7a78cdce4dcf0abac93795c83a26a9

    • SHA512

      31a0b365ddc3d0e070addce178747f990504c6e2661f515bcd9b54fd4f88c956585c2bd4df4788e5e16b4bb5d51246911f81dccac38817f7d51b383fa4a6c60c

    • SSDEEP

      1536:aCHFo6JIdXT0XRhyRjVf3HaXOJR0zcEIvCZ1xjs9np/IPioYJbQtH9/sP1+C:aCHFoOINSyRxvHF5vCbxwpI6WH9/s/

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks