General

  • Target

    65698d0f78a8b142e28e077c1bac2bf24a950df6c46277c4a76b12066d4977f8

  • Size

    50KB

  • Sample

    241122-arfhmazrds

  • MD5

    af7210680d438a82c1f2539ee82e0ae4

  • SHA1

    7ecc373ae91d7dee40a6cda7fee5e9348ae71e17

  • SHA256

    65698d0f78a8b142e28e077c1bac2bf24a950df6c46277c4a76b12066d4977f8

  • SHA512

    7ee2479bc189a3258b4c0eb2d1421ce6b48e1d2a55371b8bf93f240009733af6d8a9e63093469923ae5b9a073dd83cec30d9a60c70c7432de1ee901b95757dfd

  • SSDEEP

    768:6dwNNlcdyo+4lMreJfbg52cyJkWtyC3VQGPL4vzZq2o9W7GsxBbPr:6OwY4m6fbZ3pty0SGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      65698d0f78a8b142e28e077c1bac2bf24a950df6c46277c4a76b12066d4977f8

    • Size

      50KB

    • MD5

      af7210680d438a82c1f2539ee82e0ae4

    • SHA1

      7ecc373ae91d7dee40a6cda7fee5e9348ae71e17

    • SHA256

      65698d0f78a8b142e28e077c1bac2bf24a950df6c46277c4a76b12066d4977f8

    • SHA512

      7ee2479bc189a3258b4c0eb2d1421ce6b48e1d2a55371b8bf93f240009733af6d8a9e63093469923ae5b9a073dd83cec30d9a60c70c7432de1ee901b95757dfd

    • SSDEEP

      768:6dwNNlcdyo+4lMreJfbg52cyJkWtyC3VQGPL4vzZq2o9W7GsxBbPr:6OwY4m6fbZ3pty0SGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks