General

  • Target

    3bc6b2e849f61c52f74a7c597892906c820882fc1cc5e51ff912a1a282db3a30N

  • Size

    1.2MB

  • Sample

    241030-mctg6azmfw

  • MD5

    7b63b96026b70bdf79b4f094905d8a50

  • SHA1

    cc637ea01e8c0232cd6a22ab7ca884936359a394

  • SHA256

    3bc6b2e849f61c52f74a7c597892906c820882fc1cc5e51ff912a1a282db3a30

  • SHA512

    85e4f07262a30d302de22e8ca8ad3e4eed9e060e5d9f9403522e0f7fef38769ca74dc38addf323c8a21a76e40a8d9c7d29a2d8f5419757f178c3a1a327c45dd2

  • SSDEEP

    24576:94QSoaZeSaWi8yus7RMiP84Icjj9TRWT65DNy09x/b:+vhwF7RMu84V9TwT657Vb

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      3bc6b2e849f61c52f74a7c597892906c820882fc1cc5e51ff912a1a282db3a30N

    • Size

      1.2MB

    • MD5

      7b63b96026b70bdf79b4f094905d8a50

    • SHA1

      cc637ea01e8c0232cd6a22ab7ca884936359a394

    • SHA256

      3bc6b2e849f61c52f74a7c597892906c820882fc1cc5e51ff912a1a282db3a30

    • SHA512

      85e4f07262a30d302de22e8ca8ad3e4eed9e060e5d9f9403522e0f7fef38769ca74dc38addf323c8a21a76e40a8d9c7d29a2d8f5419757f178c3a1a327c45dd2

    • SSDEEP

      24576:94QSoaZeSaWi8yus7RMiP84Icjj9TRWT65DNy09x/b:+vhwF7RMu84V9TwT657Vb

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks