General

  • Target

    306bec3b6ced0249800c6a2e61131253f811e2a018ed744af1549c70fc944f41N

  • Size

    291KB

  • Sample

    241006-svjzbsvgqe

  • MD5

    b6d5caba9220cd11ccce790eb8f37a00

  • SHA1

    ff429289c7b48e432bb9f16e340d1fc54bdbafd5

  • SHA256

    306bec3b6ced0249800c6a2e61131253f811e2a018ed744af1549c70fc944f41

  • SHA512

    97ecb15bf71a091acccfe1f420f3fda33736c02523e2b61087091b89c3ea96917585211c6b3dc797f1cfefa42108faf7b76ecc6351201b6e58c39859ce8bd3b8

  • SSDEEP

    3072:Omboh8y8JisMebH9CijF4eEJNdMNII62hteDOS7/yS7AjTUm8+gKBsQ2DPfYkGSV:O2xTIqn0dU6CtI74wl1IkGSHo

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      306bec3b6ced0249800c6a2e61131253f811e2a018ed744af1549c70fc944f41N

    • Size

      291KB

    • MD5

      b6d5caba9220cd11ccce790eb8f37a00

    • SHA1

      ff429289c7b48e432bb9f16e340d1fc54bdbafd5

    • SHA256

      306bec3b6ced0249800c6a2e61131253f811e2a018ed744af1549c70fc944f41

    • SHA512

      97ecb15bf71a091acccfe1f420f3fda33736c02523e2b61087091b89c3ea96917585211c6b3dc797f1cfefa42108faf7b76ecc6351201b6e58c39859ce8bd3b8

    • SSDEEP

      3072:Omboh8y8JisMebH9CijF4eEJNdMNII62hteDOS7/yS7AjTUm8+gKBsQ2DPfYkGSV:O2xTIqn0dU6CtI74wl1IkGSHo

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks