General

  • Target

    f303e4551fa0c021a61073e7a401c9ba2f621a9f0a02e7bc8d5522bd2e5aa345.exe

  • Size

    312KB

  • Sample

    241117-1syzgayhla

  • MD5

    bf48630d7ba4088905ca483f2dbc9382

  • SHA1

    af93f4609326a6630a19808775ae0b879d2131d5

  • SHA256

    f303e4551fa0c021a61073e7a401c9ba2f621a9f0a02e7bc8d5522bd2e5aa345

  • SHA512

    d24f4e7896ce33e799661b3110757d55beb36adb1a54b1f0a686718750a64f9b67bca2cf9b9c95833c2a849658168be9da2deee3341a16ac69d126c0f95f749a

  • SSDEEP

    3072:x330ltWCmu9GeOyKM4ipNF87xLEoijgExxC51eWvvidBbj0rX+qMQm0GCHG:x0ltWSGedMxQoij9ng1NvidaXrmJt

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      f303e4551fa0c021a61073e7a401c9ba2f621a9f0a02e7bc8d5522bd2e5aa345.exe

    • Size

      312KB

    • MD5

      bf48630d7ba4088905ca483f2dbc9382

    • SHA1

      af93f4609326a6630a19808775ae0b879d2131d5

    • SHA256

      f303e4551fa0c021a61073e7a401c9ba2f621a9f0a02e7bc8d5522bd2e5aa345

    • SHA512

      d24f4e7896ce33e799661b3110757d55beb36adb1a54b1f0a686718750a64f9b67bca2cf9b9c95833c2a849658168be9da2deee3341a16ac69d126c0f95f749a

    • SSDEEP

      3072:x330ltWCmu9GeOyKM4ipNF87xLEoijgExxC51eWvvidBbj0rX+qMQm0GCHG:x0ltWSGedMxQoij9ng1NvidaXrmJt

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks