General

  • Target

    4faba9ed83b00709192b3af0114a99bd5da022d656789b5ce0c126747d2fb113N

  • Size

    272KB

  • Sample

    241006-sz5ftswanf

  • MD5

    6a55bf3288584d3cd973e65c3fa5bdd0

  • SHA1

    9943ee3fb3719871aff991f7329ffcbd20ac4323

  • SHA256

    4faba9ed83b00709192b3af0114a99bd5da022d656789b5ce0c126747d2fb113

  • SHA512

    9773a8d1e5f4ef5d86a26d7f5eee889dabce593a14094ed7f64e8e443e3af10c13c1f3a8ff0a349a8d46cdf48737e89bc1286fb09ca231cfcd194eaef2eb65e5

  • SSDEEP

    3072:Vt+dR1llX2xDpFuacFujhGa3/rQLAD/wWmzIBn7d4foB7nl5ejTnXGGCH:WlSDpABxavrQLKLl5en/

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      4faba9ed83b00709192b3af0114a99bd5da022d656789b5ce0c126747d2fb113N

    • Size

      272KB

    • MD5

      6a55bf3288584d3cd973e65c3fa5bdd0

    • SHA1

      9943ee3fb3719871aff991f7329ffcbd20ac4323

    • SHA256

      4faba9ed83b00709192b3af0114a99bd5da022d656789b5ce0c126747d2fb113

    • SHA512

      9773a8d1e5f4ef5d86a26d7f5eee889dabce593a14094ed7f64e8e443e3af10c13c1f3a8ff0a349a8d46cdf48737e89bc1286fb09ca231cfcd194eaef2eb65e5

    • SSDEEP

      3072:Vt+dR1llX2xDpFuacFujhGa3/rQLAD/wWmzIBn7d4foB7nl5ejTnXGGCH:WlSDpABxavrQLKLl5en/

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks