General
-
Target
fc878b59d0092c8c2bc7fc661594950d_JaffaCakes118
-
Size
78KB
-
Sample
240420-mavx7seg4z
-
MD5
fc878b59d0092c8c2bc7fc661594950d
-
SHA1
31ab99be8b4b77914a5992716126b59817b2ef57
-
SHA256
c0a69a814901d62d808843465e7f8b500e0b796a6a52aa464696f79345dafc9e
-
SHA512
606c5c7e3b64b27198d45ca5aabaeebc36955ab73698103aab4c5b5a257951d9b077c9b6523f5ebd92efae408fd763176137f068a8bed8c253404f2de4b72bf3
-
SSDEEP
1536:shPWV5jLXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQt96m9/Qc1ST:wPWV5jLSyRxvY3md+dWWZyF9/QZ
Static task
static1
Behavioral task
behavioral1
Sample
fc878b59d0092c8c2bc7fc661594950d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fc878b59d0092c8c2bc7fc661594950d_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
fc878b59d0092c8c2bc7fc661594950d_JaffaCakes118
-
Size
78KB
-
MD5
fc878b59d0092c8c2bc7fc661594950d
-
SHA1
31ab99be8b4b77914a5992716126b59817b2ef57
-
SHA256
c0a69a814901d62d808843465e7f8b500e0b796a6a52aa464696f79345dafc9e
-
SHA512
606c5c7e3b64b27198d45ca5aabaeebc36955ab73698103aab4c5b5a257951d9b077c9b6523f5ebd92efae408fd763176137f068a8bed8c253404f2de4b72bf3
-
SSDEEP
1536:shPWV5jLXT0XRhyRjVf3znOJTv3lcUK/+dWzCP7oYTcSQt96m9/Qc1ST:wPWV5jLSyRxvY3md+dWWZyF9/QZ
Score10/10-
MetamorpherRAT
Metamorpherrat is a hacking tool that has been around for a while since 2013.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution
-
Adds Run key to start application
-