Extracted

• • Target

    f5303867c36723864ea2552f5b0f9dd5_JaffaCakes118

  • Size

    1.1MB

  • MD5

    f5303867c36723864ea2552f5b0f9dd5

  • SHA1

    6712bc0830f4aade110727ca5ad0957e7c356b38

  • SHA256

    6325bea1cf28a17d635c5148e9b394991b34f9bb99825dd17be6ff49db07be31

  • SHA512

    0b8ab227627ed2b73e71379b85ab3abdffd2494237b48d5d69988ae86805dc3b252a532e7a0008ea4f24a66211feaa993c6ace6f0c414f50af8c1e0b74d6434b

  • SSDEEP

    24576:F31SZSaMidm23AzTOAV4xhFIaSV5VZZGSDNVwftoJNDBki+4K4zI4VX9ImOfj:FwZSTidmvuAGhFA54qVwfoNDBkirJzIP

  Score

  10^/10

  bdaejecxmrigaspackv2backdoordiscoveryminer

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • xmrig

    XMRig is a high performance, open source, cross platform CPU/GPU miner.

    minerxmrig

  • XMRig Miner payload

    miner

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Deletes itself

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2