General
-
Target
eb9d83883aeb809ffeaede845a4e84f3_JaffaCakes118
-
Size
78KB
-
Sample
240410-v38nrsab21
-
MD5
eb9d83883aeb809ffeaede845a4e84f3
-
SHA1
e883cc67717319cab15f97018186e6cf216b633c
-
SHA256
f2fe64f487a40a76b52e459513a5b64827e7f1222343ce8953ae087264171bd1
-
SHA512
fb958e97ed77aa1944f04a76c21171acab5100787542cfa52a328b293e9a3a6ebf44397fbd0f53967c4e942b18ea71b91dbcea9c9352323722bbddadb28bd6e2
-
SSDEEP
1536:HRWV5jSwXT0XRhyRjVf3HaXOJR0zcEIvCZ1xjs9np/IPioYJbQtd6z9/r13E:HRWV5jSoSyRxvHF5vCbxwpI6Ws9/i
Static task
static1
Behavioral task
behavioral1
Sample
eb9d83883aeb809ffeaede845a4e84f3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eb9d83883aeb809ffeaede845a4e84f3_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
eb9d83883aeb809ffeaede845a4e84f3_JaffaCakes118
-
Size
78KB
-
MD5
eb9d83883aeb809ffeaede845a4e84f3
-
SHA1
e883cc67717319cab15f97018186e6cf216b633c
-
SHA256
f2fe64f487a40a76b52e459513a5b64827e7f1222343ce8953ae087264171bd1
-
SHA512
fb958e97ed77aa1944f04a76c21171acab5100787542cfa52a328b293e9a3a6ebf44397fbd0f53967c4e942b18ea71b91dbcea9c9352323722bbddadb28bd6e2
-
SSDEEP
1536:HRWV5jSwXT0XRhyRjVf3HaXOJR0zcEIvCZ1xjs9np/IPioYJbQtd6z9/r13E:HRWV5jSoSyRxvHF5vCbxwpI6Ws9/i
Score10/10-
MetamorpherRAT
Metamorpherrat is a hacking tool that has been around for a while since 2013.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-