Overview

overview

10

Static

static

3

bf740b68ea...18.exe

windows7-x64

7

bf740b68ea...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bf740b68ea9c3f9ecb6fd67df61502b2_JaffaCakes118

  • Size

    78KB

  • Sample

    240824-1cqcds1aph

  • MD5

    bf740b68ea9c3f9ecb6fd67df61502b2

  • SHA1

    0e4b41dbce2eef95b58cf8edede85c39a1698ae5

  • SHA256

    60bd19754d736b5314c3205a876e6083bbd05c7081891996191cfaa68822e307

  • SHA512

    e1020d7e7c45e2967ee59971dd8df442a01722386284dd69f1e90e1e96d704530ce23f04a779213c01a3d43f039f49d9e66160d6a1ca5db2cb234c6c6079074a

  • SSDEEP

    1536:Vxc5jSDpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtM619/Mx1hq:bc5jS9JywQjDgTLopLwdCFJzL9/Mc

Score
10/10
metamorpherratdiscoveryratstealertrojan

Malware Config

Targets

    • Target

      bf740b68ea9c3f9ecb6fd67df61502b2_JaffaCakes118

    • Size

      78KB

    • MD5

      bf740b68ea9c3f9ecb6fd67df61502b2

    • SHA1

      0e4b41dbce2eef95b58cf8edede85c39a1698ae5

    • SHA256

      60bd19754d736b5314c3205a876e6083bbd05c7081891996191cfaa68822e307

    • SHA512

      e1020d7e7c45e2967ee59971dd8df442a01722386284dd69f1e90e1e96d704530ce23f04a779213c01a3d43f039f49d9e66160d6a1ca5db2cb234c6c6079074a

    • SSDEEP

      1536:Vxc5jSDpJywt04wbje3IgTazcoOEEQLwdCRoaeuProYMHQtM619/Mx1hq:bc5jS9JywQjDgTLopLwdCFJzL9/Mc

    Score
    10/10
    discoverymetamorpherratratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks