General

  • Target

    34aa3f7cd0493e2a8d5258a3cbe7ee1e0c7d53e0b8549d84989cc4a5ce17386cN

  • Size

    19KB

  • Sample

    241021-zf5qtaveng

  • MD5

    fa9b94d1b6fe18d76493bc486da97fa0

  • SHA1

    d8a6b7c937eee335f5aa352b74466357b0157b3a

  • SHA256

    34aa3f7cd0493e2a8d5258a3cbe7ee1e0c7d53e0b8549d84989cc4a5ce17386c

  • SHA512

    3e8e7486d8adb420361ddb54ff7b9bbeec4748b0044a4a00f9e60138b87b147a21f16fde877f207bfa292bb01a850ef50444ff85104b98d6fde54952459b745d

  • SSDEEP

    384:1FxSBXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:UfQGPL4vzZq2o9W7GsxBbPr

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      34aa3f7cd0493e2a8d5258a3cbe7ee1e0c7d53e0b8549d84989cc4a5ce17386cN

    • Size

      19KB

    • MD5

      fa9b94d1b6fe18d76493bc486da97fa0

    • SHA1

      d8a6b7c937eee335f5aa352b74466357b0157b3a

    • SHA256

      34aa3f7cd0493e2a8d5258a3cbe7ee1e0c7d53e0b8549d84989cc4a5ce17386c

    • SHA512

      3e8e7486d8adb420361ddb54ff7b9bbeec4748b0044a4a00f9e60138b87b147a21f16fde877f207bfa292bb01a850ef50444ff85104b98d6fde54952459b745d

    • SSDEEP

      384:1FxSBXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:UfQGPL4vzZq2o9W7GsxBbPr

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks