General
-
Target
e29c065b3cc8cf0d428ba543285c903c_JaffaCakes118
-
Size
78KB
-
Sample
240406-qb91asba2y
-
MD5
e29c065b3cc8cf0d428ba543285c903c
-
SHA1
a1ea91c8eedaa2f4f1851574eabfd686e8830fa7
-
SHA256
621d30c45f2c271f2b5dc84fd0b4e1998e7a78cdce4dcf0abac93795c83a26a9
-
SHA512
31a0b365ddc3d0e070addce178747f990504c6e2661f515bcd9b54fd4f88c956585c2bd4df4788e5e16b4bb5d51246911f81dccac38817f7d51b383fa4a6c60c
-
SSDEEP
1536:aCHFo6JIdXT0XRhyRjVf3HaXOJR0zcEIvCZ1xjs9np/IPioYJbQtH9/sP1+C:aCHFoOINSyRxvHF5vCbxwpI6WH9/s/
Static task
static1
Behavioral task
behavioral1
Sample
e29c065b3cc8cf0d428ba543285c903c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e29c065b3cc8cf0d428ba543285c903c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
e29c065b3cc8cf0d428ba543285c903c_JaffaCakes118
-
Size
78KB
-
MD5
e29c065b3cc8cf0d428ba543285c903c
-
SHA1
a1ea91c8eedaa2f4f1851574eabfd686e8830fa7
-
SHA256
621d30c45f2c271f2b5dc84fd0b4e1998e7a78cdce4dcf0abac93795c83a26a9
-
SHA512
31a0b365ddc3d0e070addce178747f990504c6e2661f515bcd9b54fd4f88c956585c2bd4df4788e5e16b4bb5d51246911f81dccac38817f7d51b383fa4a6c60c
-
SSDEEP
1536:aCHFo6JIdXT0XRhyRjVf3HaXOJR0zcEIvCZ1xjs9np/IPioYJbQtH9/sP1+C:aCHFoOINSyRxvHF5vCbxwpI6WH9/s/
Score10/10-
MetamorpherRAT
Metamorpherrat is a hacking tool that has been around for a while since 2013.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-