General

  • Target

    b40bfa505b1edaea8452649668458c341fc257301a1f81a810a348d49fb34454

  • Size

    464KB

  • Sample

    241011-bxph6aybjd

  • MD5

    07987d1a745ecd647896484686e26e9c

  • SHA1

    8f2848222876dc8aa2d2200c0cbb9891b8b78038

  • SHA256

    b40bfa505b1edaea8452649668458c341fc257301a1f81a810a348d49fb34454

  • SHA512

    b99e9a4f21f43b4a8802c8be9135b38ba4087adbe2e611d001cbafa806c85149979417866e85828a80371747ecb4ba89384afa3bff2add38c9869d561577b212

  • SSDEEP

    12288:p5NaIk7nsp5pahQ2hkhsYvCpJZ2u4Tsgm/:p5lB2hkhfvCpf2fTf

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      b40bfa505b1edaea8452649668458c341fc257301a1f81a810a348d49fb34454

    • Size

      464KB

    • MD5

      07987d1a745ecd647896484686e26e9c

    • SHA1

      8f2848222876dc8aa2d2200c0cbb9891b8b78038

    • SHA256

      b40bfa505b1edaea8452649668458c341fc257301a1f81a810a348d49fb34454

    • SHA512

      b99e9a4f21f43b4a8802c8be9135b38ba4087adbe2e611d001cbafa806c85149979417866e85828a80371747ecb4ba89384afa3bff2add38c9869d561577b212

    • SSDEEP

      12288:p5NaIk7nsp5pahQ2hkhsYvCpJZ2u4Tsgm/:p5lB2hkhfvCpf2fTf

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks