Overview

overview

10

Static

static

3

67dd5acb7a...18.exe

windows7-x64

10

67dd5acb7a...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67dd5acb7ae0086fb4621ed8a72eba96_JaffaCakes118

  • Size

    78KB

  • Sample

    241021-3j7alaverq

  • MD5

    67dd5acb7ae0086fb4621ed8a72eba96

  • SHA1

    68ecf17551df7d9bf52ee41139341e8e8458a8fa

  • SHA256

    e45adb1bfff5105c3a9e78f551e3a04d59e147584beaa65aca43803e9710f386

  • SHA512

    995c2e189e0addc2e3f19dad6da97a65e231783293e22eda8c2e2dcbc37f70f842898c3e82b64cd26653d9f1b013a3bb6cd61c674c402aad66377b889a7bcee4

  • SSDEEP

    1536:buHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQte09/B1cn:buHa3Ln7N041Qqhge09/G

Score
10/10
metamorpherratdiscoverypersistenceratstealertrojan

Malware Config

Targets

    • Target

      67dd5acb7ae0086fb4621ed8a72eba96_JaffaCakes118

    • Size

      78KB

    • MD5

      67dd5acb7ae0086fb4621ed8a72eba96

    • SHA1

      68ecf17551df7d9bf52ee41139341e8e8458a8fa

    • SHA256

      e45adb1bfff5105c3a9e78f551e3a04d59e147584beaa65aca43803e9710f386

    • SHA512

      995c2e189e0addc2e3f19dad6da97a65e231783293e22eda8c2e2dcbc37f70f842898c3e82b64cd26653d9f1b013a3bb6cd61c674c402aad66377b889a7bcee4

    • SSDEEP

      1536:buHH638dy0MochZDsC8Kl/99Z242UdIAkn3jKZPjoYaoQte09/B1cn:buHa3Ln7N041Qqhge09/G

    Score
    10/10
    metamorpherratdiscoverypersistenceratstealertrojan

    • MetamorpherRAT

      Metamorpherrat is a hacking tool that has been around for a while since 2013.

      trojanratstealermetamorpherrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Uses the VBS compiler for execution

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks