General

  • Target

    ba53de7a4ec4c56f99822cbfae39c68852d725956d1851ff5a05d160b04d0e46.exe

  • Size

    387KB

  • Sample

    241112-1rfrha1mbx

  • MD5

    3329064dd8ebf660e97949f1b02f00a5

  • SHA1

    1a4903a79ad4ec416b28f700b67475044c5cc332

  • SHA256

    ba53de7a4ec4c56f99822cbfae39c68852d725956d1851ff5a05d160b04d0e46

  • SHA512

    80565ae8e6622d8f4fe6581f0c82e3632490e3a9e1a446409cbaaceec72730177aa2939f06772aa0fccd9dd7d221844e57fdf24fbfbe9aa928529d2554b2e163

  • SSDEEP

    6144:Ku4/N3Ey3OnuxqL7Hv0f5JISfqLJAazynL3c+fR6TH:Ku4/NNWv0f5JISfqLhzynL37O

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      ba53de7a4ec4c56f99822cbfae39c68852d725956d1851ff5a05d160b04d0e46.exe

    • Size

      387KB

    • MD5

      3329064dd8ebf660e97949f1b02f00a5

    • SHA1

      1a4903a79ad4ec416b28f700b67475044c5cc332

    • SHA256

      ba53de7a4ec4c56f99822cbfae39c68852d725956d1851ff5a05d160b04d0e46

    • SHA512

      80565ae8e6622d8f4fe6581f0c82e3632490e3a9e1a446409cbaaceec72730177aa2939f06772aa0fccd9dd7d221844e57fdf24fbfbe9aa928529d2554b2e163

    • SSDEEP

      6144:Ku4/N3Ey3OnuxqL7Hv0f5JISfqLJAazynL3c+fR6TH:Ku4/NNWv0f5JISfqLhzynL37O

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks