General

  • Target

    f3bc13d7857a6dc5ae83d04b0f125f2246422b589961dfcbaa4087f1e3fc9bedN

  • Size

    52KB

  • Sample

    241026-vnky6atqgm

  • MD5

    0d152a0f4e4ddb9d5f009dd02f4b4320

  • SHA1

    3c43fc8c1d8d3e0a82357fb76b3052fe8db35e01

  • SHA256

    f3bc13d7857a6dc5ae83d04b0f125f2246422b589961dfcbaa4087f1e3fc9bed

  • SHA512

    9f34bfa8203d12e2796f52011bb3164a9d0d24122f984f3323de11de4bff675c4cb200b2c619fdddb8e1127e7dc9479f775b7d913ed80745c235515a08651014

  • SSDEEP

    768:QVMe3Vk9haLNFZ131W8g/ReQGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/RlGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      f3bc13d7857a6dc5ae83d04b0f125f2246422b589961dfcbaa4087f1e3fc9bedN

    • Size

      52KB

    • MD5

      0d152a0f4e4ddb9d5f009dd02f4b4320

    • SHA1

      3c43fc8c1d8d3e0a82357fb76b3052fe8db35e01

    • SHA256

      f3bc13d7857a6dc5ae83d04b0f125f2246422b589961dfcbaa4087f1e3fc9bed

    • SHA512

      9f34bfa8203d12e2796f52011bb3164a9d0d24122f984f3323de11de4bff675c4cb200b2c619fdddb8e1127e7dc9479f775b7d913ed80745c235515a08651014

    • SSDEEP

      768:QVMe3Vk9haLNFZ131W8g/ReQGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/RlGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks