General

  • Target

    JaffaCakes118_60eb638295720acae219e287602e5630

  • Size

    108KB

  • Sample

    250101-11btxazjaj

  • MD5

    60eb638295720acae219e287602e5630

  • SHA1

    78bc204d57fea6d129d7ea3c6ef0944e1ac3dc90

  • SHA256

    a3aacd4b23d76efedc3ef15c4ac65297f2da11a0cacdbb2276432568f80be2ba

  • SHA512

    5425599aed90354b949bd4068ab3290a380925e42ea973b740b4fe6f7be8cafe62a8ab88ee820d89d0e421ebf5008cb2c7dbf77269cd4125036eca8adfbae507

  • SSDEEP

    1536:vpIq8LQiEKdeT+XBBxk5SVzHCZ6mSnDxoy9GCq2iW7z:vpIpQiEglq24+nDxoqGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      JaffaCakes118_60eb638295720acae219e287602e5630

    • Size

      108KB

    • MD5

      60eb638295720acae219e287602e5630

    • SHA1

      78bc204d57fea6d129d7ea3c6ef0944e1ac3dc90

    • SHA256

      a3aacd4b23d76efedc3ef15c4ac65297f2da11a0cacdbb2276432568f80be2ba

    • SHA512

      5425599aed90354b949bd4068ab3290a380925e42ea973b740b4fe6f7be8cafe62a8ab88ee820d89d0e421ebf5008cb2c7dbf77269cd4125036eca8adfbae507

    • SSDEEP

      1536:vpIq8LQiEKdeT+XBBxk5SVzHCZ6mSnDxoy9GCq2iW7z:vpIpQiEglq24+nDxoqGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks