General
-
Target
JaffaCakes118_60ea2269b35a51768406078692584880
-
Size
189KB
-
Sample
250101-1zcptayrej
-
MD5
60ea2269b35a51768406078692584880
-
SHA1
1325b1a50cd618f33f013c200ffb4d1e0d7a0757
-
SHA256
c07c9f2ea20f0f65d3f1c9633356b1013ffd94339be78a12a2b598c8d103b332
-
SHA512
10d710dc0a93e92a132c6659ed83e643ad9281ea3e48cc5b9e4673c5dffc7a3acb36b846ba1ef911304ff4cb6476ad62154c0c4f9e1ac51ee535f253df9ec542
-
SSDEEP
3072:5iWclMDXf2r+6pOFkSQeeWUgGdXQHp4e0t+gplmp8UFWwDEGCH:5iWclKur+4GVftGdgJ4btQ8GT
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_60ea2269b35a51768406078692584880.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
JaffaCakes118_60ea2269b35a51768406078692584880
-
Size
189KB
-
MD5
60ea2269b35a51768406078692584880
-
SHA1
1325b1a50cd618f33f013c200ffb4d1e0d7a0757
-
SHA256
c07c9f2ea20f0f65d3f1c9633356b1013ffd94339be78a12a2b598c8d103b332
-
SHA512
10d710dc0a93e92a132c6659ed83e643ad9281ea3e48cc5b9e4673c5dffc7a3acb36b846ba1ef911304ff4cb6476ad62154c0c4f9e1ac51ee535f253df9ec542
-
SSDEEP
3072:5iWclMDXf2r+6pOFkSQeeWUgGdXQHp4e0t+gplmp8UFWwDEGCH:5iWclKur+4GVftGdgJ4btQ8GT
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-