Overview

overview

10

Static

static

3

7bf7c1e294...18.exe

windows7-x64

10

7bf7c1e294...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7bf7c1e29406149511fb00a093822982_JaffaCakes118

  • Size

    78KB

  • Sample

    240731-kt6gya1fka

  • MD5

    7bf7c1e29406149511fb00a093822982

  • SHA1

    82db58d8aa2c7d62e93679ac5881dfd60cd5c905

  • SHA256

    8fcc8d5e25ad7701b22d0c55828bdca920acede7e6a45f74e113e3331feccdf3

  • SHA512

    1a2e78f0bcca85ab3a516a5850cc21450fe83a14c12dd98e5c637fd620afa9eeab320c0417a0fb49144270df1f786fe52645bacf8005df52f6683da340a5ad94

  • SSDEEP

    1536:ZXRy5j7AlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9Qti6K9/n1fT:BRy5j7AtWDDILJLovbicqOq3o+nC9/V

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      7bf7c1e29406149511fb00a093822982_JaffaCakes118

    • Size

      78KB

    • MD5

      7bf7c1e29406149511fb00a093822982

    • SHA1

      82db58d8aa2c7d62e93679ac5881dfd60cd5c905

    • SHA256

      8fcc8d5e25ad7701b22d0c55828bdca920acede7e6a45f74e113e3331feccdf3

    • SHA512

      1a2e78f0bcca85ab3a516a5850cc21450fe83a14c12dd98e5c637fd620afa9eeab320c0417a0fb49144270df1f786fe52645bacf8005df52f6683da340a5ad94

    • SSDEEP

      1536:ZXRy5j7AlGmWw644txVILJtcfJuovFdPKmNqOqD70Gou2P2oYe9Qti6K9/n1fT:BRy5j7AtWDDILJLovbicqOq3o+nC9/V

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks