General

  • Target

    ad7a629f3ee18fe2694c7109f1957e33b462b4198b9c6fc114e655177b04ebe0N

  • Size

    26KB

  • Sample

    241020-wvcf2avaql

  • MD5

    87461b6d1092c4d15733c4ecbf8bef80

  • SHA1

    0f554980bd341913e61f29e1f7912a5951aa6781

  • SHA256

    ad7a629f3ee18fe2694c7109f1957e33b462b4198b9c6fc114e655177b04ebe0

  • SHA512

    d9dd182a894302031ba5a55bc709956d78ebb81f401e8dbfbcdcbb9630d404e285ecbfbf989e4e0f1607092763856c70aa81c167829494fbe6569fe87d69a843

  • SSDEEP

    768:Td5u7mNGtyVfbKqQGPL4vzZq2o9W7G8xBug:Td5z/fWJGCq2iW7H

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      ad7a629f3ee18fe2694c7109f1957e33b462b4198b9c6fc114e655177b04ebe0N

    • Size

      26KB

    • MD5

      87461b6d1092c4d15733c4ecbf8bef80

    • SHA1

      0f554980bd341913e61f29e1f7912a5951aa6781

    • SHA256

      ad7a629f3ee18fe2694c7109f1957e33b462b4198b9c6fc114e655177b04ebe0

    • SHA512

      d9dd182a894302031ba5a55bc709956d78ebb81f401e8dbfbcdcbb9630d404e285ecbfbf989e4e0f1607092763856c70aa81c167829494fbe6569fe87d69a843

    • SSDEEP

      768:Td5u7mNGtyVfbKqQGPL4vzZq2o9W7G8xBug:Td5z/fWJGCq2iW7H

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks