General

  • Target

    c1b1266e1e09d2cde5cc8bc3b75320953867fc8a3508e433932a971e8d8e98b6N.exe

  • Size

    52KB

  • Sample

    241129-1ytxpsylev

  • MD5

    b9f63df70505ebd110e1a17e18119b70

  • SHA1

    3bd456a8383540e6cd9e34ea04cb13bb22cfefe4

  • SHA256

    c1b1266e1e09d2cde5cc8bc3b75320953867fc8a3508e433932a971e8d8e98b6

  • SHA512

    83007dd60c55bdd70379c9a5fcf7fbe5d6524beb49feaae137789fff174e1ba31ebe94db3422a528b55e4260c7cf2d5d51215e7bfe05b65240f21ede597c34db

  • SSDEEP

    768:QVMe3Vk9haLNFZ131W8g/5vQGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/5oGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      c1b1266e1e09d2cde5cc8bc3b75320953867fc8a3508e433932a971e8d8e98b6N.exe

    • Size

      52KB

    • MD5

      b9f63df70505ebd110e1a17e18119b70

    • SHA1

      3bd456a8383540e6cd9e34ea04cb13bb22cfefe4

    • SHA256

      c1b1266e1e09d2cde5cc8bc3b75320953867fc8a3508e433932a971e8d8e98b6

    • SHA512

      83007dd60c55bdd70379c9a5fcf7fbe5d6524beb49feaae137789fff174e1ba31ebe94db3422a528b55e4260c7cf2d5d51215e7bfe05b65240f21ede597c34db

    • SSDEEP

      768:QVMe3Vk9haLNFZ131W8g/5vQGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/5oGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks