General

  • Target

    4382cf7dd1c27f68317b320a13c85494f3bfbf42f03d0ba8094e3aa9af2d66d3N.exe

  • Size

    96KB

  • Sample

    241203-y93b4syjfr

  • MD5

    be8823d295e6ffc960687356e53c0b90

  • SHA1

    3bd48c1055316152b7d799afb695d4cb678d9a94

  • SHA256

    4382cf7dd1c27f68317b320a13c85494f3bfbf42f03d0ba8094e3aa9af2d66d3

  • SHA512

    b1b6f2c62c9bc9a59c25ba41b58cf52d935658d353e8274ec577bb645cb8b9bf937a3f237c612f64ff00f1e6ef61c2344b6edaea725c322d778447011ce7934e

  • SSDEEP

    1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1fLGCq2iW7z:pJLrp0cQ7QAINqPDHQnc0GCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      4382cf7dd1c27f68317b320a13c85494f3bfbf42f03d0ba8094e3aa9af2d66d3N.exe

    • Size

      96KB

    • MD5

      be8823d295e6ffc960687356e53c0b90

    • SHA1

      3bd48c1055316152b7d799afb695d4cb678d9a94

    • SHA256

      4382cf7dd1c27f68317b320a13c85494f3bfbf42f03d0ba8094e3aa9af2d66d3

    • SHA512

      b1b6f2c62c9bc9a59c25ba41b58cf52d935658d353e8274ec577bb645cb8b9bf937a3f237c612f64ff00f1e6ef61c2344b6edaea725c322d778447011ce7934e

    • SSDEEP

      1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1fLGCq2iW7z:pJLrp0cQ7QAINqPDHQnc0GCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks