General

  • Target

    e562f1b3f4c499a97b2fe8ca66ed7f1f_JaffaCakes118

  • Size

    78KB

  • Sample

    240407-t8xm1shd24

  • MD5

    e562f1b3f4c499a97b2fe8ca66ed7f1f

  • SHA1

    e5a425346b6b0d7f005b25422d5e4e457e145460

  • SHA256

    dcce137db6346cacbd8d7454083a6f2c68ad492ce1f6a247e05cd89c9960f010

  • SHA512

    5899fc54d6f446b8095506fc5fe1369a27a33c74cfa2d7c20f1f25084407d0ace39a6f098bcebef6b6272ab2a2047e502037fbc4af7554357f8ac882c21c9174

  • SSDEEP

    1536:uhPWV5rXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQt96n9/As1qO:KPWV5rSyRxvY3md+dWWZyU9/V

Malware Config

Targets

    • Target

      e562f1b3f4c499a97b2fe8ca66ed7f1f_JaffaCakes118

    • Size

      78KB

    • MD5

      e562f1b3f4c499a97b2fe8ca66ed7f1f

    • SHA1

      e5a425346b6b0d7f005b25422d5e4e457e145460

    • SHA256

      dcce137db6346cacbd8d7454083a6f2c68ad492ce1f6a247e05cd89c9960f010

    • SHA512

      5899fc54d6f446b8095506fc5fe1369a27a33c74cfa2d7c20f1f25084407d0ace39a6f098bcebef6b6272ab2a2047e502037fbc4af7554357f8ac882c21c9174

    • SSDEEP

      1536:uhPWV5rXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQt96n9/As1qO:KPWV5rSyRxvY3md+dWWZyU9/V

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks