General

  • Target

    JaffaCakes118_7bc389ac07539c93fd25d5693a4d45a0

  • Size

    26KB

  • Sample

    250104-zy1vksxmdy

  • MD5

    7bc389ac07539c93fd25d5693a4d45a0

  • SHA1

    a7e0f7acf74a72a1ee970ab7dbdae0efbc30477a

  • SHA256

    988d1264a79fd5cf58e798451e97f8aab7f99b4cdfea06cf1a33d316442cf2a5

  • SHA512

    9809780bf8c5cfb48444ea85afa6fd8b57bc1352109d32c2e07b1c550bf4b2019eb1f9632baaa562fa2e40b91934a31025a057fd42c62420ee574e5cd9d14a0d

  • SSDEEP

    768:UdKs0+2vhZRQGPL4vzZq2o9W7GsxBbPr:Zf5hZWGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      JaffaCakes118_7bc389ac07539c93fd25d5693a4d45a0

    • Size

      26KB

    • MD5

      7bc389ac07539c93fd25d5693a4d45a0

    • SHA1

      a7e0f7acf74a72a1ee970ab7dbdae0efbc30477a

    • SHA256

      988d1264a79fd5cf58e798451e97f8aab7f99b4cdfea06cf1a33d316442cf2a5

    • SHA512

      9809780bf8c5cfb48444ea85afa6fd8b57bc1352109d32c2e07b1c550bf4b2019eb1f9632baaa562fa2e40b91934a31025a057fd42c62420ee574e5cd9d14a0d

    • SSDEEP

      768:UdKs0+2vhZRQGPL4vzZq2o9W7GsxBbPr:Zf5hZWGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks