General

  • Target

    bb5b3d0baceb9ea5af3551fb882c020df4d1c80844d24bfa10278136c32d7b82

  • Size

    3.2MB

  • Sample

    241019-cx7keatflr

  • MD5

    2ffe35ac01a3db55b67fbcfce29c6466

  • SHA1

    be7724546e8820dff4c6b126745fd6dc151ff632

  • SHA256

    bb5b3d0baceb9ea5af3551fb882c020df4d1c80844d24bfa10278136c32d7b82

  • SHA512

    ebf6b179512cfd9ccfeed2cfa00ed304bc8262966fbe0c7eb95a436e3919cafb90a18035c143f0cb0ac3c4c8eedceb1ffa5e2cac37c8788c6b5cdc642e65c5b8

  • SSDEEP

    98304:FPq1dQa+ZfTSkt1tLoupNJoUyAIKuDTxvqBMFa3BjaaSYj22MsPclC8G:bLZfTSStLoiyAItTxvqBMFa3Bjaatj2O

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      bb5b3d0baceb9ea5af3551fb882c020df4d1c80844d24bfa10278136c32d7b82

    • Size

      3.2MB

    • MD5

      2ffe35ac01a3db55b67fbcfce29c6466

    • SHA1

      be7724546e8820dff4c6b126745fd6dc151ff632

    • SHA256

      bb5b3d0baceb9ea5af3551fb882c020df4d1c80844d24bfa10278136c32d7b82

    • SHA512

      ebf6b179512cfd9ccfeed2cfa00ed304bc8262966fbe0c7eb95a436e3919cafb90a18035c143f0cb0ac3c4c8eedceb1ffa5e2cac37c8788c6b5cdc642e65c5b8

    • SSDEEP

      98304:FPq1dQa+ZfTSkt1tLoupNJoUyAIKuDTxvqBMFa3BjaaSYj22MsPclC8G:bLZfTSStLoiyAItTxvqBMFa3Bjaatj2O

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks