General

  • Target

    58941248f0f0ecbadef4f5ccdf9343b045961b4cf3161b1a4423377b79fc61e2N.exe

  • Size

    72KB

  • Sample

    241205-pwpdnavmas

  • MD5

    b293ca96c62a287191eacdec7326b990

  • SHA1

    1ff15bda0fef2793d3d05239a5705b9a5ca7681d

  • SHA256

    58941248f0f0ecbadef4f5ccdf9343b045961b4cf3161b1a4423377b79fc61e2

  • SHA512

    b258979c5cc9e2036d425aa086826f8dbdedef8ed4d36fa92b50d04a4e16722428e6548b0139a4f668408324b6dc39137f0c15bef32d0c128ddef96c3a4b687e

  • SSDEEP

    768:Qdwz0k23YXEL5kYcDjf19W6q0GEiMywPoTVIgsQGPL4vzZq2o9W7GsxBbPr:7e6HfDWs3oTVPvGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      58941248f0f0ecbadef4f5ccdf9343b045961b4cf3161b1a4423377b79fc61e2N.exe

    • Size

      72KB

    • MD5

      b293ca96c62a287191eacdec7326b990

    • SHA1

      1ff15bda0fef2793d3d05239a5705b9a5ca7681d

    • SHA256

      58941248f0f0ecbadef4f5ccdf9343b045961b4cf3161b1a4423377b79fc61e2

    • SHA512

      b258979c5cc9e2036d425aa086826f8dbdedef8ed4d36fa92b50d04a4e16722428e6548b0139a4f668408324b6dc39137f0c15bef32d0c128ddef96c3a4b687e

    • SSDEEP

      768:Qdwz0k23YXEL5kYcDjf19W6q0GEiMywPoTVIgsQGPL4vzZq2o9W7GsxBbPr:7e6HfDWs3oTVPvGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks