General

  • Target

    8533bb3ca7c39789952be350fd2260960eed5dd1c79dffa00f53bdbbeaf4f2f3N

  • Size

    186KB

  • Sample

    241012-d39sdsvgrl

  • MD5

    80ab00a9489d26fbdaf146e50bc89020

  • SHA1

    5429ff45211a500ab30b2d1719a57cef2204ffc7

  • SHA256

    8533bb3ca7c39789952be350fd2260960eed5dd1c79dffa00f53bdbbeaf4f2f3

  • SHA512

    80e621d5b0057b9d9b9dcc6bf3f12a7d73d830c2715960f7fdd0793635cc2c22b151a6faa5114b2fc22140805ceb853681115e029e5377bec25e98770314bd57

  • SSDEEP

    1536:tBVPZVWcDjK/9vE+XFOC3++JWjAcoX/eZqSMRPYeZqSMRqeZqSMRcKLEVGCq2iWv:t72ZO+J4AcoXcsjgCLYGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      8533bb3ca7c39789952be350fd2260960eed5dd1c79dffa00f53bdbbeaf4f2f3N

    • Size

      186KB

    • MD5

      80ab00a9489d26fbdaf146e50bc89020

    • SHA1

      5429ff45211a500ab30b2d1719a57cef2204ffc7

    • SHA256

      8533bb3ca7c39789952be350fd2260960eed5dd1c79dffa00f53bdbbeaf4f2f3

    • SHA512

      80e621d5b0057b9d9b9dcc6bf3f12a7d73d830c2715960f7fdd0793635cc2c22b151a6faa5114b2fc22140805ceb853681115e029e5377bec25e98770314bd57

    • SSDEEP

      1536:tBVPZVWcDjK/9vE+XFOC3++JWjAcoX/eZqSMRPYeZqSMRqeZqSMRcKLEVGCq2iWv:t72ZO+J4AcoXcsjgCLYGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks