General

  • Target

    JaffaCakes118_7677aa611e1bdb53f3914015560502b9

  • Size

    88KB

  • Sample

    250104-ac2sbasqhr

  • MD5

    7677aa611e1bdb53f3914015560502b9

  • SHA1

    3f319144957a041a1ba8271f8598730c10c9bce2

  • SHA256

    6af960cced770de8745f403bfb8893ea0df44c1128a7b507e79504d0714e47f2

  • SHA512

    2047f942dff9b94202f12844394ae97b0d30a4b5636a931ff13e12e1b71367a1d47b2d422868029348c193a36f9bc60cd9ab82fa3d821fe8a83900c2a3e75a6d

  • SSDEEP

    1536:mO/dfDsm4Mb8ClTm7jvLoJs8lXAnsbnstYDWGCq2iW7z:fbq7linstY6GCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      JaffaCakes118_7677aa611e1bdb53f3914015560502b9

    • Size

      88KB

    • MD5

      7677aa611e1bdb53f3914015560502b9

    • SHA1

      3f319144957a041a1ba8271f8598730c10c9bce2

    • SHA256

      6af960cced770de8745f403bfb8893ea0df44c1128a7b507e79504d0714e47f2

    • SHA512

      2047f942dff9b94202f12844394ae97b0d30a4b5636a931ff13e12e1b71367a1d47b2d422868029348c193a36f9bc60cd9ab82fa3d821fe8a83900c2a3e75a6d

    • SSDEEP

      1536:mO/dfDsm4Mb8ClTm7jvLoJs8lXAnsbnstYDWGCq2iW7z:fbq7linstY6GCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks