General
-
Target
JaffaCakes118_60bd1ef1f6c91b2dda2eb0144f2d50e0
-
Size
116KB
-
Sample
250101-z9mgbsvmdz
-
MD5
60bd1ef1f6c91b2dda2eb0144f2d50e0
-
SHA1
4e76b2969953a171194aa4a043e8fa3c8daf05a2
-
SHA256
736547ef9aaa32013a6efa62126572b4c7abeef4a793f9cf4ec7457b00b1e8d4
-
SHA512
19c1233396fc5c042dab5b92a786e9b496a9190e7d33596a555af335262ec5a5e326770a078c46344d37edd78cf219a03b2043af83305ce8cfa7979edf6c6c10
-
SSDEEP
1536:a8uVDngAOVU9gSPPSdeV5UQfd0vYxujuwtpKGCq2iW7z:S4U9gSLV5UQfavUQMGCH
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_60bd1ef1f6c91b2dda2eb0144f2d50e0.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
JaffaCakes118_60bd1ef1f6c91b2dda2eb0144f2d50e0
-
Size
116KB
-
MD5
60bd1ef1f6c91b2dda2eb0144f2d50e0
-
SHA1
4e76b2969953a171194aa4a043e8fa3c8daf05a2
-
SHA256
736547ef9aaa32013a6efa62126572b4c7abeef4a793f9cf4ec7457b00b1e8d4
-
SHA512
19c1233396fc5c042dab5b92a786e9b496a9190e7d33596a555af335262ec5a5e326770a078c46344d37edd78cf219a03b2043af83305ce8cfa7979edf6c6c10
-
SSDEEP
1536:a8uVDngAOVU9gSPPSdeV5UQfd0vYxujuwtpKGCq2iW7z:S4U9gSLV5UQfavUQMGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-