General

  • Target

    8b20cfe86f2ef778461bb0ef34add6703c4bef84eb40f1547585ff515365900c

  • Size

    32KB

  • Sample

    241026-2fn46szdra

  • MD5

    803008f5f087c184df1a3569fbff0321

  • SHA1

    e1a13695ad6a6dca16f89e1951ac6e2fb44e19d7

  • SHA256

    8b20cfe86f2ef778461bb0ef34add6703c4bef84eb40f1547585ff515365900c

  • SHA512

    aaf92024070f52ae9221a7127774411f426ea52ba3447643788a5132e6857fe05d29c57fe61b52662a90bc36ddfa84f6144905d5fc9e72e6ffc728b3ae89f1aa

  • SSDEEP

    768:bQGPL4vzZq2o9W7GsxBbPrnzQGPL4vzZq2o9W7GsxBbPr:cGCq2iW7zjkGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      8b20cfe86f2ef778461bb0ef34add6703c4bef84eb40f1547585ff515365900c

    • Size

      32KB

    • MD5

      803008f5f087c184df1a3569fbff0321

    • SHA1

      e1a13695ad6a6dca16f89e1951ac6e2fb44e19d7

    • SHA256

      8b20cfe86f2ef778461bb0ef34add6703c4bef84eb40f1547585ff515365900c

    • SHA512

      aaf92024070f52ae9221a7127774411f426ea52ba3447643788a5132e6857fe05d29c57fe61b52662a90bc36ddfa84f6144905d5fc9e72e6ffc728b3ae89f1aa

    • SSDEEP

      768:bQGPL4vzZq2o9W7GsxBbPrnzQGPL4vzZq2o9W7GsxBbPr:cGCq2iW7zjkGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks