General

  • Target

    JaffaCakes118_7b9fcac85230085b3970bc6dd14fffe0

  • Size

    522KB

  • Sample

    250104-zb4b7axraj

  • MD5

    7b9fcac85230085b3970bc6dd14fffe0

  • SHA1

    76f810ca084d2f34cbaa6871f6ab9ecc0052f51c

  • SHA256

    cdde573c9802ae7d258b2fd3d1c9f3a1a35eac60df830b9cdc0784fffbf218ce

  • SHA512

    b48a92d5f64af406cabe21432604a731ad02a3ef616c818d89e07094ddfda83f946e349635d4a4eef668647fc5e9f7eeb9df65f5a023865f3d23cc491586c1e5

  • SSDEEP

    12288:1EdwCWMjXMij2klpvNe63KYjm2xGSyEP:1EdwOrBp1ess

Malware Config

Extracted

Family

bdaejec

C2

1.dnsnb8.net

Targets

    • Target

      JaffaCakes118_7b9fcac85230085b3970bc6dd14fffe0

    • Size

      522KB

    • MD5

      7b9fcac85230085b3970bc6dd14fffe0

    • SHA1

      76f810ca084d2f34cbaa6871f6ab9ecc0052f51c

    • SHA256

      cdde573c9802ae7d258b2fd3d1c9f3a1a35eac60df830b9cdc0784fffbf218ce

    • SHA512

      b48a92d5f64af406cabe21432604a731ad02a3ef616c818d89e07094ddfda83f946e349635d4a4eef668647fc5e9f7eeb9df65f5a023865f3d23cc491586c1e5

    • SSDEEP

      12288:1EdwCWMjXMij2klpvNe63KYjm2xGSyEP:1EdwOrBp1ess

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks