General

  • Target

    3c4a250de87d7139406d2558c050a11be5811a150e21ea5bbea69e1ce68c18f4N

  • Size

    8.5MB

  • Sample

    241103-ant7lszdjm

  • MD5

    5e3dbd75bcf8850aa276499f1e24aa10

  • SHA1

    a889bb78b7b88187df92334bea63c207e90f0966

  • SHA256

    3c4a250de87d7139406d2558c050a11be5811a150e21ea5bbea69e1ce68c18f4

  • SHA512

    3d0aabda32693eff29eb9955e13eebc8294c6125f5d08a321bfe09630d8293afa78e3bdd16f6148eb96d16d512fe13c4fe70314f32e59614dd158d23b93ac15f

  • SSDEEP

    196608:eFHo96JT/fhnvFqTfgpY4dBe62HcIrt0OmQwPKIwkQ:eFHo9YT3NFqjaBe6dIhbSok

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      3c4a250de87d7139406d2558c050a11be5811a150e21ea5bbea69e1ce68c18f4N

    • Size

      8.5MB

    • MD5

      5e3dbd75bcf8850aa276499f1e24aa10

    • SHA1

      a889bb78b7b88187df92334bea63c207e90f0966

    • SHA256

      3c4a250de87d7139406d2558c050a11be5811a150e21ea5bbea69e1ce68c18f4

    • SHA512

      3d0aabda32693eff29eb9955e13eebc8294c6125f5d08a321bfe09630d8293afa78e3bdd16f6148eb96d16d512fe13c4fe70314f32e59614dd158d23b93ac15f

    • SSDEEP

      196608:eFHo96JT/fhnvFqTfgpY4dBe62HcIrt0OmQwPKIwkQ:eFHo9YT3NFqjaBe6dIhbSok

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks