General

  • Target

    15cf92b00601fa0510d50d715719630d08647f404afa92fada73b4db3a4dfe0b

  • Size

    188KB

  • Sample

    241129-ytjvtstmaz

  • MD5

    a7b210aec6bb20bb6ea901c5cb4584e7

  • SHA1

    3bff102f4e4b2e3d20e3deffb489dacb732e60cb

  • SHA256

    15cf92b00601fa0510d50d715719630d08647f404afa92fada73b4db3a4dfe0b

  • SHA512

    733dba6e9c2633a5abdfc6a4aefdf2cd76f15c9bf9cb3e21aa26b43061b5dc7bc65b84aef6a5b534521c5ee6ddd22317c5b945b613194846c0acba2b8e4d4669

  • SSDEEP

    3072:ZOQvsEYpQaFc6wwj/eXGwKrYQRbLNj7O/QYmN:1TZa61KrRbH

Malware Config

Extracted

Family

bdaejec

C2

1.dnsnb8.net

Targets

    • Target

      15cf92b00601fa0510d50d715719630d08647f404afa92fada73b4db3a4dfe0b

    • Size

      188KB

    • MD5

      a7b210aec6bb20bb6ea901c5cb4584e7

    • SHA1

      3bff102f4e4b2e3d20e3deffb489dacb732e60cb

    • SHA256

      15cf92b00601fa0510d50d715719630d08647f404afa92fada73b4db3a4dfe0b

    • SHA512

      733dba6e9c2633a5abdfc6a4aefdf2cd76f15c9bf9cb3e21aa26b43061b5dc7bc65b84aef6a5b534521c5ee6ddd22317c5b945b613194846c0acba2b8e4d4669

    • SSDEEP

      3072:ZOQvsEYpQaFc6wwj/eXGwKrYQRbLNj7O/QYmN:1TZa61KrRbH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks