General
-
Target
JaffaCakes118_7677aa611e1bdb53f3914015560502b9
-
Size
88KB
-
Sample
250104-ac2sbasqhr
-
MD5
7677aa611e1bdb53f3914015560502b9
-
SHA1
3f319144957a041a1ba8271f8598730c10c9bce2
-
SHA256
6af960cced770de8745f403bfb8893ea0df44c1128a7b507e79504d0714e47f2
-
SHA512
2047f942dff9b94202f12844394ae97b0d30a4b5636a931ff13e12e1b71367a1d47b2d422868029348c193a36f9bc60cd9ab82fa3d821fe8a83900c2a3e75a6d
-
SSDEEP
1536:mO/dfDsm4Mb8ClTm7jvLoJs8lXAnsbnstYDWGCq2iW7z:fbq7linstY6GCH
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7677aa611e1bdb53f3914015560502b9.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
JaffaCakes118_7677aa611e1bdb53f3914015560502b9
-
Size
88KB
-
MD5
7677aa611e1bdb53f3914015560502b9
-
SHA1
3f319144957a041a1ba8271f8598730c10c9bce2
-
SHA256
6af960cced770de8745f403bfb8893ea0df44c1128a7b507e79504d0714e47f2
-
SHA512
2047f942dff9b94202f12844394ae97b0d30a4b5636a931ff13e12e1b71367a1d47b2d422868029348c193a36f9bc60cd9ab82fa3d821fe8a83900c2a3e75a6d
-
SSDEEP
1536:mO/dfDsm4Mb8ClTm7jvLoJs8lXAnsbnstYDWGCq2iW7z:fbq7linstY6GCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-