General

  • Target

    JaffaCakes118_4f1f41eb9a982c800b2967c915035db3

  • Size

    26KB

  • Sample

    250101-k1l2wazqft

  • MD5

    4f1f41eb9a982c800b2967c915035db3

  • SHA1

    924f6e3d60caa403b609d23a63e79b275d958cf5

  • SHA256

    ce8565d23873b4112e209eadccef3e3436f3d766375c2a8974f8de62df6c3943

  • SHA512

    69b931dad22040f6e1f2c888ec88810818c0eb64c0d3c34d5626efcd06ea043ac74db64609af8fca97f7dbcbdd24969217bd0062811e9a94166ea750f46f559b

  • SSDEEP

    768:bd5u7mNGtyVfR2sQGPL4vzZq2o9W7GtxMOBT:bd5z/fAvGCq2iW7u

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      JaffaCakes118_4f1f41eb9a982c800b2967c915035db3

    • Size

      26KB

    • MD5

      4f1f41eb9a982c800b2967c915035db3

    • SHA1

      924f6e3d60caa403b609d23a63e79b275d958cf5

    • SHA256

      ce8565d23873b4112e209eadccef3e3436f3d766375c2a8974f8de62df6c3943

    • SHA512

      69b931dad22040f6e1f2c888ec88810818c0eb64c0d3c34d5626efcd06ea043ac74db64609af8fca97f7dbcbdd24969217bd0062811e9a94166ea750f46f559b

    • SSDEEP

      768:bd5u7mNGtyVfR2sQGPL4vzZq2o9W7GtxMOBT:bd5z/fAvGCq2iW7u

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks