General

  • Target

    da091d699a88251cfe0eee508e0137a3bf174e7e2aa1088fd6dc494012a99b07

  • Size

    52KB

  • Sample

    241025-g42d7awgrn

  • MD5

    b900e9796b2c23cc9f7a976916fd7244

  • SHA1

    3c2f2c12b08be97082fab3c7599d2993789cd222

  • SHA256

    da091d699a88251cfe0eee508e0137a3bf174e7e2aa1088fd6dc494012a99b07

  • SHA512

    502603f4042f59977465abe1ca43c0b551ab636eed998e1a641822bb0c31bfca71e6a2464a7ec476fd2d278c1bf6c426170c5ce1247d87afdc21342c731dc291

  • SSDEEP

    768:QVMe3Vk9haLNFZ131W8g/78QGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/7fGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      da091d699a88251cfe0eee508e0137a3bf174e7e2aa1088fd6dc494012a99b07

    • Size

      52KB

    • MD5

      b900e9796b2c23cc9f7a976916fd7244

    • SHA1

      3c2f2c12b08be97082fab3c7599d2993789cd222

    • SHA256

      da091d699a88251cfe0eee508e0137a3bf174e7e2aa1088fd6dc494012a99b07

    • SHA512

      502603f4042f59977465abe1ca43c0b551ab636eed998e1a641822bb0c31bfca71e6a2464a7ec476fd2d278c1bf6c426170c5ce1247d87afdc21342c731dc291

    • SSDEEP

      768:QVMe3Vk9haLNFZ131W8g/78QGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/7fGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks