General

  • Target

    b5e818273f6951d62141068b1b89303381c0dc97590914dd03c34e382c01a747

  • Size

    1.4MB

  • Sample

    241201-prs62swkgk

  • MD5

    d55d2c57e589db62994c82245150e3af

  • SHA1

    2f112723056519f3a74a50156076a88b942b96ca

  • SHA256

    b5e818273f6951d62141068b1b89303381c0dc97590914dd03c34e382c01a747

  • SHA512

    c942b42d4eb8687d87b26acf14b5878588b2f78d81a31ec7791f9071146e72aa70da44acccbc76846bfd37e4697d62e31946cf7ca5b5dc5b5cea1ba09060db2d

  • SSDEEP

    24576:TPb78OQMB7koSBDFAMLiHeRGx4QvKegJDE4TmrQLay6PEzDzGg2v:Tz77Lmy+Ex4QvKeg1ZGfj8zDag2v

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      b5e818273f6951d62141068b1b89303381c0dc97590914dd03c34e382c01a747

    • Size

      1.4MB

    • MD5

      d55d2c57e589db62994c82245150e3af

    • SHA1

      2f112723056519f3a74a50156076a88b942b96ca

    • SHA256

      b5e818273f6951d62141068b1b89303381c0dc97590914dd03c34e382c01a747

    • SHA512

      c942b42d4eb8687d87b26acf14b5878588b2f78d81a31ec7791f9071146e72aa70da44acccbc76846bfd37e4697d62e31946cf7ca5b5dc5b5cea1ba09060db2d

    • SSDEEP

      24576:TPb78OQMB7koSBDFAMLiHeRGx4QvKegJDE4TmrQLay6PEzDzGg2v:Tz77Lmy+Ex4QvKeg1ZGfj8zDag2v

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks