bdaejec

General

Target

6ad5219093de572edbbaac89ed03c443356f854d14b995f386c1adec32277989
Size

1.8MB
Sample

240919-gwqbysvcln
MD5

1a19f7c2912ddae73b162c0fecdec3d6
SHA1

a83f45d9e6f8fa8a30ba73fab56e115b4dc16249
SHA256

6ad5219093de572edbbaac89ed03c443356f854d14b995f386c1adec32277989
SHA512

3f1ac04a2b43335c4c6b4f2393c154b76aeb0a5b576a635814b02e7148a8799ddc90c73c8a75b890e889e51552a0e8aa507e176e46bb5981e50e79b961d5db17
SSDEEP

49152:V9UAxBrFrrDgPSso9hgLoGRhPhVLm1Rs3AySUIlqI4ZvgNpxX:D5so9jChPhVLm1dySUSqlZva

Score

10^/10

Malware Config

Targets

- Target
  
  6ad5219093de572edbbaac89ed03c443356f854d14b995f386c1adec32277989
- Size
  
  1.8MB
- MD5
  
  1a19f7c2912ddae73b162c0fecdec3d6
- SHA1
  
  a83f45d9e6f8fa8a30ba73fab56e115b4dc16249
- SHA256
  
  6ad5219093de572edbbaac89ed03c443356f854d14b995f386c1adec32277989
- SHA512
  
  3f1ac04a2b43335c4c6b4f2393c154b76aeb0a5b576a635814b02e7148a8799ddc90c73c8a75b890e889e51552a0e8aa507e176e46bb5981e50e79b961d5db17
- SSDEEP
  
  49152:V9UAxBrFrrDgPSso9hgLoGRhPhVLm1Rs3AySUIlqI4ZvgNpxX:D5so9jChPhVLm1dySUSqlZva
Score

10^/10

bdaejec aspackv2 backdoor discovery upx
- Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detects Bdaejec Backdoor.

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2