General

  • Target

    6c7f440be78773d3f4f50a09c83eded8c5f907a24bdf7b71b7076052d4997105N

  • Size

    564KB

  • Sample

    241104-pd2w2azeqm

  • MD5

    6ec293421f725398cd83231ee1243300

  • SHA1

    7b04dc62f6a49c95b767d8964681d7b1cf1a2ad8

  • SHA256

    6c7f440be78773d3f4f50a09c83eded8c5f907a24bdf7b71b7076052d4997105

  • SHA512

    0a91d7874eac156cfe3d3cc7d209b57beb99cb81bc506000321b3c69c0c0152240e7c6bbd4dd5370b1683cf3c72bf4f9797b0e66a484d25d9b1c21c3e95599fe

  • SSDEEP

    6144:TNUWRXniv2DEK+OHuFQVUeso7qWAzYHLnIT:TNXtniv2gK+OHuFQVUesoqzYHLn

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      6c7f440be78773d3f4f50a09c83eded8c5f907a24bdf7b71b7076052d4997105N

    • Size

      564KB

    • MD5

      6ec293421f725398cd83231ee1243300

    • SHA1

      7b04dc62f6a49c95b767d8964681d7b1cf1a2ad8

    • SHA256

      6c7f440be78773d3f4f50a09c83eded8c5f907a24bdf7b71b7076052d4997105

    • SHA512

      0a91d7874eac156cfe3d3cc7d209b57beb99cb81bc506000321b3c69c0c0152240e7c6bbd4dd5370b1683cf3c72bf4f9797b0e66a484d25d9b1c21c3e95599fe

    • SSDEEP

      6144:TNUWRXniv2DEK+OHuFQVUeso7qWAzYHLnIT:TNXtniv2gK+OHuFQVUesoqzYHLn

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks