General

  • Target

    535a1981f7a3cae68df3ee1fa7569e93ef3497f2e26c81e4638bfdffa06b738e

  • Size

    80KB

  • Sample

    241124-2mzt9azkej

  • MD5

    37b63a9aa08a645d62157eaffd5e817f

  • SHA1

    040df34f8ae271f22c894ad1f328017697d43584

  • SHA256

    535a1981f7a3cae68df3ee1fa7569e93ef3497f2e26c81e4638bfdffa06b738e

  • SHA512

    781710122eef555a2507b909561d52b8fe40670226522e87b0cfb6cc68f6aa97739558351319ad04bf7dc3236f37dc28a9a80ac5e26e8897060a6fb46a6b06dc

  • SSDEEP

    1536:fHB0UxMkzOt7HcvJGt5AdHIOWnToIf12ZXPGCq2iW7z:fhAWJGSCTBf12ZfGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      535a1981f7a3cae68df3ee1fa7569e93ef3497f2e26c81e4638bfdffa06b738e

    • Size

      80KB

    • MD5

      37b63a9aa08a645d62157eaffd5e817f

    • SHA1

      040df34f8ae271f22c894ad1f328017697d43584

    • SHA256

      535a1981f7a3cae68df3ee1fa7569e93ef3497f2e26c81e4638bfdffa06b738e

    • SHA512

      781710122eef555a2507b909561d52b8fe40670226522e87b0cfb6cc68f6aa97739558351319ad04bf7dc3236f37dc28a9a80ac5e26e8897060a6fb46a6b06dc

    • SSDEEP

      1536:fHB0UxMkzOt7HcvJGt5AdHIOWnToIf12ZXPGCq2iW7z:fhAWJGSCTBf12ZfGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks