General

  • Target

    2024-12-04_e9fc2381cfd60a5353b73e6c394b5caf_avoslocker_luca-stealer_revil_wapomi

  • Size

    12.1MB

  • Sample

    241204-x4llqsxkdt

  • MD5

    e9fc2381cfd60a5353b73e6c394b5caf

  • SHA1

    61c84c9282eb870315e40992b45c65d9936cf84f

  • SHA256

    f11968df196f1c4fa3be918636fff4a8068c26e3a1fd72a51122ca23585659c9

  • SHA512

    e0b5bed3093db2351bf9df49955f8a49584601d01d0393910d192584daec9a7d423c2df0580aa68d0b1e4aa32e627024bd1fab3722a47b8f120b40acdb2a7cee

  • SSDEEP

    196608:KqqKNdE37uPvvyqOnkhJsv6tWKFdu9Cie9GJ:KqqKNIC3bOSJsv6tWKFdu9Cdy

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2024-12-04_e9fc2381cfd60a5353b73e6c394b5caf_avoslocker_luca-stealer_revil_wapomi

    • Size

      12.1MB

    • MD5

      e9fc2381cfd60a5353b73e6c394b5caf

    • SHA1

      61c84c9282eb870315e40992b45c65d9936cf84f

    • SHA256

      f11968df196f1c4fa3be918636fff4a8068c26e3a1fd72a51122ca23585659c9

    • SHA512

      e0b5bed3093db2351bf9df49955f8a49584601d01d0393910d192584daec9a7d423c2df0580aa68d0b1e4aa32e627024bd1fab3722a47b8f120b40acdb2a7cee

    • SSDEEP

      196608:KqqKNdE37uPvvyqOnkhJsv6tWKFdu9Cie9GJ:KqqKNIC3bOSJsv6tWKFdu9Cdy

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks