General

  • Target

    JaffaCakes118_6891c0bf7e75cd4edc6191a7e47c0c70

  • Size

    300KB

  • Sample

    250102-2aezbaxqfw

  • MD5

    6891c0bf7e75cd4edc6191a7e47c0c70

  • SHA1

    9de3f6f7deeba4aee6caff3c624f0d7229bfe578

  • SHA256

    60da89dd8097ad3f77aa43d8de7031df5f61112083ffb3c00849b92d70f8d03b

  • SHA512

    7b328cb48d7164e8b0528228013affb1cba30676e4bcc49117e7c6261d83ce918ed8807334078c2a9c4421e4396622400f84a9c40437afcd38b38ef8abf99def

  • SSDEEP

    6144:6a2kFOgQUD//KGQLkz7/JXLl+DJoTBq5R50dqOMmqMfy7tsqI:nXFOeD//KzLkvxXLl+DJoTs5RWPqM6Jx

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      JaffaCakes118_6891c0bf7e75cd4edc6191a7e47c0c70

    • Size

      300KB

    • MD5

      6891c0bf7e75cd4edc6191a7e47c0c70

    • SHA1

      9de3f6f7deeba4aee6caff3c624f0d7229bfe578

    • SHA256

      60da89dd8097ad3f77aa43d8de7031df5f61112083ffb3c00849b92d70f8d03b

    • SHA512

      7b328cb48d7164e8b0528228013affb1cba30676e4bcc49117e7c6261d83ce918ed8807334078c2a9c4421e4396622400f84a9c40437afcd38b38ef8abf99def

    • SSDEEP

      6144:6a2kFOgQUD//KGQLkz7/JXLl+DJoTBq5R50dqOMmqMfy7tsqI:nXFOeD//KzLkvxXLl+DJoTs5RWPqM6Jx

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks