General

  • Target

    176ea76776067006d8c12a697cf9ab18883d89dceb9b73f2f3c5d996bf3cbb3d.exe

  • Size

    96KB

  • Sample

    241218-bemlvavrgs

  • MD5

    3014298fba4398181164eaae5b96730a

  • SHA1

    c82af38c0a4047fb40e1c08eba0126d621591b7f

  • SHA256

    176ea76776067006d8c12a697cf9ab18883d89dceb9b73f2f3c5d996bf3cbb3d

  • SHA512

    a34c71e211f6cd822f0792db58bcd383e37d552cfcd104a6e1d0014390503af42d4969beede31e2ab1891150f6fc9ca71d2dd4f2afcd74720f6d9d9b0c2f0476

  • SSDEEP

    1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1yyGCq2iW7zu:pJLrp0cQ7QAINqPDHQncKGCHi

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      176ea76776067006d8c12a697cf9ab18883d89dceb9b73f2f3c5d996bf3cbb3d.exe

    • Size

      96KB

    • MD5

      3014298fba4398181164eaae5b96730a

    • SHA1

      c82af38c0a4047fb40e1c08eba0126d621591b7f

    • SHA256

      176ea76776067006d8c12a697cf9ab18883d89dceb9b73f2f3c5d996bf3cbb3d

    • SHA512

      a34c71e211f6cd822f0792db58bcd383e37d552cfcd104a6e1d0014390503af42d4969beede31e2ab1891150f6fc9ca71d2dd4f2afcd74720f6d9d9b0c2f0476

    • SSDEEP

      1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1yyGCq2iW7zu:pJLrp0cQ7QAINqPDHQncKGCHi

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks