General

  • Target

    9915ae76d0f8671e795132d7bc163946e6af8e7c62173f3f0c056108210bcdf4

  • Size

    104KB

  • Sample

    240921-2vwgssyelg

  • MD5

    ba808dc39520b861fece390da68a896d

  • SHA1

    066e589a03dfd7b43a579541f5ad39029a580e8f

  • SHA256

    9915ae76d0f8671e795132d7bc163946e6af8e7c62173f3f0c056108210bcdf4

  • SHA512

    8efbb19181cb5762269030acb7483ec0ef7ebf82c0058797b4792b47e5e864239a2de27438c59bee08fffeb1887a55251d53617ef837f4c5f8ab34624ead785e

  • SSDEEP

    1536:eFEL0c3++wG5NlKOln9N7oKsMmuB2IMokC+0FfHYToSMFnGCq2iW7z:eFUxlnjmDXokC+GfHYToSM5GCH

Malware Config

Targets

    • Target

      9915ae76d0f8671e795132d7bc163946e6af8e7c62173f3f0c056108210bcdf4

    • Size

      104KB

    • MD5

      ba808dc39520b861fece390da68a896d

    • SHA1

      066e589a03dfd7b43a579541f5ad39029a580e8f

    • SHA256

      9915ae76d0f8671e795132d7bc163946e6af8e7c62173f3f0c056108210bcdf4

    • SHA512

      8efbb19181cb5762269030acb7483ec0ef7ebf82c0058797b4792b47e5e864239a2de27438c59bee08fffeb1887a55251d53617ef837f4c5f8ab34624ead785e

    • SSDEEP

      1536:eFEL0c3++wG5NlKOln9N7oKsMmuB2IMokC+0FfHYToSMFnGCq2iW7z:eFUxlnjmDXokC+GfHYToSM5GCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks