General
-
Target
JaffaCakes118_7b9fcac85230085b3970bc6dd14fffe0
-
Size
522KB
-
Sample
250104-zb4b7axraj
-
MD5
7b9fcac85230085b3970bc6dd14fffe0
-
SHA1
76f810ca084d2f34cbaa6871f6ab9ecc0052f51c
-
SHA256
cdde573c9802ae7d258b2fd3d1c9f3a1a35eac60df830b9cdc0784fffbf218ce
-
SHA512
b48a92d5f64af406cabe21432604a731ad02a3ef616c818d89e07094ddfda83f946e349635d4a4eef668647fc5e9f7eeb9df65f5a023865f3d23cc491586c1e5
-
SSDEEP
12288:1EdwCWMjXMij2klpvNe63KYjm2xGSyEP:1EdwOrBp1ess
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_7b9fcac85230085b3970bc6dd14fffe0.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
1.dnsnb8.net
Targets
-
-
Target
JaffaCakes118_7b9fcac85230085b3970bc6dd14fffe0
-
Size
522KB
-
MD5
7b9fcac85230085b3970bc6dd14fffe0
-
SHA1
76f810ca084d2f34cbaa6871f6ab9ecc0052f51c
-
SHA256
cdde573c9802ae7d258b2fd3d1c9f3a1a35eac60df830b9cdc0784fffbf218ce
-
SHA512
b48a92d5f64af406cabe21432604a731ad02a3ef616c818d89e07094ddfda83f946e349635d4a4eef668647fc5e9f7eeb9df65f5a023865f3d23cc491586c1e5
-
SSDEEP
12288:1EdwCWMjXMij2klpvNe63KYjm2xGSyEP:1EdwOrBp1ess
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-