General

  • Target

    cce52d6a9dedd34263be9fbb16dd784ba2bae8081cc26f8be85776e781c06a88

  • Size

    19KB

  • Sample

    241126-ep14rszper

  • MD5

    28246803fe4eb75637d7cacc7ee9bf13

  • SHA1

    b4d9e0c3cbb4e646ff845c06bda2d7f66a28ee3c

  • SHA256

    cce52d6a9dedd34263be9fbb16dd784ba2bae8081cc26f8be85776e781c06a88

  • SHA512

    9bb67e9febf8f1d9e4666130f4c06c7b038a863ea88566597abcca0cdb8aae6ae23116de707c0506984168071c9e04632bfa1113e71bbff010d073a2ee3f1b0a

  • SSDEEP

    384:1F5SjXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:sdQGPL4vzZq2o9W7GsxBbPr

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      cce52d6a9dedd34263be9fbb16dd784ba2bae8081cc26f8be85776e781c06a88

    • Size

      19KB

    • MD5

      28246803fe4eb75637d7cacc7ee9bf13

    • SHA1

      b4d9e0c3cbb4e646ff845c06bda2d7f66a28ee3c

    • SHA256

      cce52d6a9dedd34263be9fbb16dd784ba2bae8081cc26f8be85776e781c06a88

    • SHA512

      9bb67e9febf8f1d9e4666130f4c06c7b038a863ea88566597abcca0cdb8aae6ae23116de707c0506984168071c9e04632bfa1113e71bbff010d073a2ee3f1b0a

    • SSDEEP

      384:1F5SjXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:sdQGPL4vzZq2o9W7GsxBbPr

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks