General
-
Target
JaffaCakes118_4f1f41eb9a982c800b2967c915035db3
-
Size
26KB
-
Sample
250101-k1l2wazqft
-
MD5
4f1f41eb9a982c800b2967c915035db3
-
SHA1
924f6e3d60caa403b609d23a63e79b275d958cf5
-
SHA256
ce8565d23873b4112e209eadccef3e3436f3d766375c2a8974f8de62df6c3943
-
SHA512
69b931dad22040f6e1f2c888ec88810818c0eb64c0d3c34d5626efcd06ea043ac74db64609af8fca97f7dbcbdd24969217bd0062811e9a94166ea750f46f559b
-
SSDEEP
768:bd5u7mNGtyVfR2sQGPL4vzZq2o9W7GtxMOBT:bd5z/fAvGCq2iW7u
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_4f1f41eb9a982c800b2967c915035db3.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
JaffaCakes118_4f1f41eb9a982c800b2967c915035db3
-
Size
26KB
-
MD5
4f1f41eb9a982c800b2967c915035db3
-
SHA1
924f6e3d60caa403b609d23a63e79b275d958cf5
-
SHA256
ce8565d23873b4112e209eadccef3e3436f3d766375c2a8974f8de62df6c3943
-
SHA512
69b931dad22040f6e1f2c888ec88810818c0eb64c0d3c34d5626efcd06ea043ac74db64609af8fca97f7dbcbdd24969217bd0062811e9a94166ea750f46f559b
-
SSDEEP
768:bd5u7mNGtyVfR2sQGPL4vzZq2o9W7GtxMOBT:bd5z/fAvGCq2iW7u
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-