General

  • Target

    ba85fc92d05875f82e71163894723d68bd599c4a38df236f80b7c2b8b632ef56N

  • Size

    52KB

  • Sample

    241022-bv6dws1bmm

  • MD5

    64aeb58341e253fbd5ea45a92438f650

  • SHA1

    3242322c9fcb6cd9d101c8cdbfda1b915369b95b

  • SHA256

    ba85fc92d05875f82e71163894723d68bd599c4a38df236f80b7c2b8b632ef56

  • SHA512

    684357cfb16bb81413e69de20453163d526bbd9210301eed3743ed74285aeba138463daa577d5ac77d1465e64ba24df90b06674f1f43f5e8eb52d75f71be6615

  • SSDEEP

    768:LAc884T68rN3dpQGPL4vzZq2o9W7GsxBbPr:Hi68rNN+GCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      ba85fc92d05875f82e71163894723d68bd599c4a38df236f80b7c2b8b632ef56N

    • Size

      52KB

    • MD5

      64aeb58341e253fbd5ea45a92438f650

    • SHA1

      3242322c9fcb6cd9d101c8cdbfda1b915369b95b

    • SHA256

      ba85fc92d05875f82e71163894723d68bd599c4a38df236f80b7c2b8b632ef56

    • SHA512

      684357cfb16bb81413e69de20453163d526bbd9210301eed3743ed74285aeba138463daa577d5ac77d1465e64ba24df90b06674f1f43f5e8eb52d75f71be6615

    • SSDEEP

      768:LAc884T68rN3dpQGPL4vzZq2o9W7GsxBbPr:Hi68rNN+GCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks