General

  • Target

    4b99249035f5fcd5f64e70bf7e09cd5a622400ea734b5d9823018d9a27b4a236

  • Size

    19KB

  • Sample

    241124-2ghc1stkez

  • MD5

    b3ce4f6af8b4780ac038584f6eb4e427

  • SHA1

    6449971b1f22750122cfe2cc532cdcf9b5277714

  • SHA256

    4b99249035f5fcd5f64e70bf7e09cd5a622400ea734b5d9823018d9a27b4a236

  • SHA512

    fbc35ea6360c74e1c2da729ce13524981e71169e91f9c157f197723968ffd3733f3cabd05c21453229584df9351e46cf525f2c4518e894ce664d5c7f3daf3bd2

  • SSDEEP

    384:1FwS0XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:hUQGPL4vzZq2o9W7GsxBbPr

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      4b99249035f5fcd5f64e70bf7e09cd5a622400ea734b5d9823018d9a27b4a236

    • Size

      19KB

    • MD5

      b3ce4f6af8b4780ac038584f6eb4e427

    • SHA1

      6449971b1f22750122cfe2cc532cdcf9b5277714

    • SHA256

      4b99249035f5fcd5f64e70bf7e09cd5a622400ea734b5d9823018d9a27b4a236

    • SHA512

      fbc35ea6360c74e1c2da729ce13524981e71169e91f9c157f197723968ffd3733f3cabd05c21453229584df9351e46cf525f2c4518e894ce664d5c7f3daf3bd2

    • SSDEEP

      384:1FwS0XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:hUQGPL4vzZq2o9W7GsxBbPr

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks