General

  • Target

    2044f5b3d1fea1ae395ce733f5bebca50319ee4a28e804276e9a28c04765c29eN

  • Size

    60KB

  • Sample

    241027-r5s5bazaqk

  • MD5

    58a19a9a0aa6b43144aa8b164317b820

  • SHA1

    a49b9026ea435898d498d620169993861d3b1919

  • SHA256

    2044f5b3d1fea1ae395ce733f5bebca50319ee4a28e804276e9a28c04765c29e

  • SHA512

    8a2ade5d299047df99c1792042e9d70b65d607f7adb521302d0a607725b3a838534c741af00197d43375304243e4c5537405b36df5d94c93526296ae77f871bf

  • SSDEEP

    768:ya1qGZIyiZjaflAkOCpwjWviZKB7JD6gK2QGPL4vzZq2o9W7GsxBbPr:ya1jZCZj83Hpwav4KDDRqGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2044f5b3d1fea1ae395ce733f5bebca50319ee4a28e804276e9a28c04765c29eN

    • Size

      60KB

    • MD5

      58a19a9a0aa6b43144aa8b164317b820

    • SHA1

      a49b9026ea435898d498d620169993861d3b1919

    • SHA256

      2044f5b3d1fea1ae395ce733f5bebca50319ee4a28e804276e9a28c04765c29e

    • SHA512

      8a2ade5d299047df99c1792042e9d70b65d607f7adb521302d0a607725b3a838534c741af00197d43375304243e4c5537405b36df5d94c93526296ae77f871bf

    • SSDEEP

      768:ya1qGZIyiZjaflAkOCpwjWviZKB7JD6gK2QGPL4vzZq2o9W7GsxBbPr:ya1jZCZj83Hpwav4KDDRqGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks