Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
JaffaCakes118_6b8b649f5e391851e6e63044ab617ec0
-
Size
68KB
-
Sample
250103-kz2e6szjbm
-
MD5
6b8b649f5e391851e6e63044ab617ec0
-
SHA1
091ccb5ecde476390aaa6887f381690bf9bdd946
-
SHA256
8ed41866a9349899697cf1ef2bc20d9b3d857ed18dd044f1afa6ce647c01bb1a
-
SHA512
d6f1f33c77dccd7c383bd5c69d1c982c702b105ce42bdfcabb60b956947805f44c9ffddebfb1b36da185f5dff8917bfb4546295ce9ad0724ef8a9f91a7dbac61
-
SSDEEP
1536:ytba+322VsMHkRuAtr9SDYJxGCq2iW7z:y5a+32pMHuJ9tzGCH
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_6b8b649f5e391851e6e63044ab617ec0.exe
Resource
win7-20241023-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
JaffaCakes118_6b8b649f5e391851e6e63044ab617ec0
-
Size
68KB
-
MD5
6b8b649f5e391851e6e63044ab617ec0
-
SHA1
091ccb5ecde476390aaa6887f381690bf9bdd946
-
SHA256
8ed41866a9349899697cf1ef2bc20d9b3d857ed18dd044f1afa6ce647c01bb1a
-
SHA512
d6f1f33c77dccd7c383bd5c69d1c982c702b105ce42bdfcabb60b956947805f44c9ffddebfb1b36da185f5dff8917bfb4546295ce9ad0724ef8a9f91a7dbac61
-
SSDEEP
1536:ytba+322VsMHkRuAtr9SDYJxGCq2iW7z:y5a+32pMHuJ9tzGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-