General

  • Target

    JaffaCakes118_60bd1ef1f6c91b2dda2eb0144f2d50e0

  • Size

    116KB

  • Sample

    250101-z9mgbsvmdz

  • MD5

    60bd1ef1f6c91b2dda2eb0144f2d50e0

  • SHA1

    4e76b2969953a171194aa4a043e8fa3c8daf05a2

  • SHA256

    736547ef9aaa32013a6efa62126572b4c7abeef4a793f9cf4ec7457b00b1e8d4

  • SHA512

    19c1233396fc5c042dab5b92a786e9b496a9190e7d33596a555af335262ec5a5e326770a078c46344d37edd78cf219a03b2043af83305ce8cfa7979edf6c6c10

  • SSDEEP

    1536:a8uVDngAOVU9gSPPSdeV5UQfd0vYxujuwtpKGCq2iW7z:S4U9gSLV5UQfavUQMGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      JaffaCakes118_60bd1ef1f6c91b2dda2eb0144f2d50e0

    • Size

      116KB

    • MD5

      60bd1ef1f6c91b2dda2eb0144f2d50e0

    • SHA1

      4e76b2969953a171194aa4a043e8fa3c8daf05a2

    • SHA256

      736547ef9aaa32013a6efa62126572b4c7abeef4a793f9cf4ec7457b00b1e8d4

    • SHA512

      19c1233396fc5c042dab5b92a786e9b496a9190e7d33596a555af335262ec5a5e326770a078c46344d37edd78cf219a03b2043af83305ce8cfa7979edf6c6c10

    • SSDEEP

      1536:a8uVDngAOVU9gSPPSdeV5UQfd0vYxujuwtpKGCq2iW7z:S4U9gSLV5UQfavUQMGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks