General

  • Target

    4c5aadd57a3202e14ad8d601e36d5712f9eb38bb22396b3a26c01f9a68007a60.exe

  • Size

    96KB

  • Sample

    241203-p9twaswpcw

  • MD5

    fd772e274b00ba82cbc3e3153452fde3

  • SHA1

    7994f3221f036f663048d4c7ffdf2f0c31b584f7

  • SHA256

    4c5aadd57a3202e14ad8d601e36d5712f9eb38bb22396b3a26c01f9a68007a60

  • SHA512

    9cc229a965bba977f9295ff329b9aecf598a20dc2642dec54d947b5064cd912bb0c0b8b35e4a3b9ced7bd680bca05e2ac84f02c89fb16edc16c1cf35ec7880e4

  • SSDEEP

    1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1fLGCq2iW7za:pJLrp0cQ7QAINqPDHQnc0GCH2

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      4c5aadd57a3202e14ad8d601e36d5712f9eb38bb22396b3a26c01f9a68007a60.exe

    • Size

      96KB

    • MD5

      fd772e274b00ba82cbc3e3153452fde3

    • SHA1

      7994f3221f036f663048d4c7ffdf2f0c31b584f7

    • SHA256

      4c5aadd57a3202e14ad8d601e36d5712f9eb38bb22396b3a26c01f9a68007a60

    • SHA512

      9cc229a965bba977f9295ff329b9aecf598a20dc2642dec54d947b5064cd912bb0c0b8b35e4a3b9ced7bd680bca05e2ac84f02c89fb16edc16c1cf35ec7880e4

    • SSDEEP

      1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1fLGCq2iW7za:pJLrp0cQ7QAINqPDHQnc0GCH2

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks