General

  • Target

    JaffaCakes118_46a31b5fa0c31231de193f2bc26a7a60

  • Size

    124KB

  • Sample

    250101-erdfgswrak

  • MD5

    46a31b5fa0c31231de193f2bc26a7a60

  • SHA1

    12e819e8a446bf62be99a0848120d6c0c0afcc10

  • SHA256

    afc3c324b2c1f4133957f2f35e9f0fd99c33b389b22a5a4d9737125e5f64cb99

  • SHA512

    161888b94dd89c9d05a2717d4589a520a2cc3d2d358ec1e3b56de01f039043a18b8ec7322acea75ef27e06fa1b5465b6029e25101b464831be3e15eeab9ec100

  • SSDEEP

    1536:jooidHqV3Uk9qnxhLjkap1i/xw1S+sSkAicQmtlI+7Z9Kw+GCFW7z:W5OUh3XNUNjzmtlI+3KjGC2

Malware Config

Targets

    • Target

      JaffaCakes118_46a31b5fa0c31231de193f2bc26a7a60

    • Size

      124KB

    • MD5

      46a31b5fa0c31231de193f2bc26a7a60

    • SHA1

      12e819e8a446bf62be99a0848120d6c0c0afcc10

    • SHA256

      afc3c324b2c1f4133957f2f35e9f0fd99c33b389b22a5a4d9737125e5f64cb99

    • SHA512

      161888b94dd89c9d05a2717d4589a520a2cc3d2d358ec1e3b56de01f039043a18b8ec7322acea75ef27e06fa1b5465b6029e25101b464831be3e15eeab9ec100

    • SSDEEP

      1536:jooidHqV3Uk9qnxhLjkap1i/xw1S+sSkAicQmtlI+7Z9Kw+GCFW7z:W5OUh3XNUNjzmtlI+3KjGC2

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks