General

  • Target

    bcde813658e1946961068af064490609b46909cef02d5b28c063ce0ac6fc2bf8

  • Size

    4.5MB

  • Sample

    241219-vtgtpawnfw

  • MD5

    f37b4b151b4441f006600ba448c7e4a1

  • SHA1

    ca036eb66f234b27c6538890e8c28173c64ea84c

  • SHA256

    bcde813658e1946961068af064490609b46909cef02d5b28c063ce0ac6fc2bf8

  • SHA512

    7d04ead32b31b27017b3f602c109c605de967336d273c36caa71e4baa187a86c27ddf457665b28ac265bc767be998945da60a1d12cf7e17a58e8674d8be8cf2b

  • SSDEEP

    98304:1o/FuJjy6T7emnJvBm4LR5H9MYdtQPd28t/ZZzF+r+MtWkhBFh:1o/kZT7em/L+Yd6PdHt/ZZZ8BF

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      bcde813658e1946961068af064490609b46909cef02d5b28c063ce0ac6fc2bf8

    • Size

      4.5MB

    • MD5

      f37b4b151b4441f006600ba448c7e4a1

    • SHA1

      ca036eb66f234b27c6538890e8c28173c64ea84c

    • SHA256

      bcde813658e1946961068af064490609b46909cef02d5b28c063ce0ac6fc2bf8

    • SHA512

      7d04ead32b31b27017b3f602c109c605de967336d273c36caa71e4baa187a86c27ddf457665b28ac265bc767be998945da60a1d12cf7e17a58e8674d8be8cf2b

    • SSDEEP

      98304:1o/FuJjy6T7emnJvBm4LR5H9MYdtQPd28t/ZZzF+r+MtWkhBFh:1o/kZT7em/L+Yd6PdHt/ZZZ8BF

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • Identifies VirtualBox via ACPI registry values (likely anti-VM)

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Checks whether UAC is enabled

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks