General

  • Target

    05c30daba17211b85a8ea0c9c4f08ba62645d62bde3df0852709be2bb82c4c68.exe

  • Size

    72KB

  • Sample

    241205-fy5nzszqf1

  • MD5

    8091c892cd2045a5fa4c85ccf229ba34

  • SHA1

    b907ff0750d28a568348c693b295a3a01ef7043e

  • SHA256

    05c30daba17211b85a8ea0c9c4f08ba62645d62bde3df0852709be2bb82c4c68

  • SHA512

    90d2bf96265ceaaa5381fddf247457980837b972972c7cd46fb3414f02ab764e4608887f83978331369f10fa0bad7b0112a3250ad853de3a746a9c4c5c08cb53

  • SSDEEP

    768:Qdwz0k23YXEL5kYcDjf19W6q0GEiMywPoTVIgsQGPL4vzZq2o9W7GsxBbPru:7e6HfDWs3oTVPvGCq2iW7za

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      05c30daba17211b85a8ea0c9c4f08ba62645d62bde3df0852709be2bb82c4c68.exe

    • Size

      72KB

    • MD5

      8091c892cd2045a5fa4c85ccf229ba34

    • SHA1

      b907ff0750d28a568348c693b295a3a01ef7043e

    • SHA256

      05c30daba17211b85a8ea0c9c4f08ba62645d62bde3df0852709be2bb82c4c68

    • SHA512

      90d2bf96265ceaaa5381fddf247457980837b972972c7cd46fb3414f02ab764e4608887f83978331369f10fa0bad7b0112a3250ad853de3a746a9c4c5c08cb53

    • SSDEEP

      768:Qdwz0k23YXEL5kYcDjf19W6q0GEiMywPoTVIgsQGPL4vzZq2o9W7GsxBbPru:7e6HfDWs3oTVPvGCq2iW7za

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks