General

  • Target

    cc490c5c919c9f04976a30ce6e006784a88e1b8066f72ee53f4bbb4b316f9d29N.exe

  • Size

    52KB

  • Sample

    241220-atf7yavjav

  • MD5

    cfe33c680fe739a357416c3e2e6b0900

  • SHA1

    3bac97f53a9c2e40639fff54f0664930fcef721b

  • SHA256

    cc490c5c919c9f04976a30ce6e006784a88e1b8066f72ee53f4bbb4b316f9d29

  • SHA512

    db5d836fb0fa58f89cc2716bfa33e903215e14d19ccf25b9378ecf3a426b033935cd3dd6210c66ddaaef4c3b222231078f9366b97659c65dc4f0fbed14e73fa2

  • SSDEEP

    768:QVMe3Vk9haLNFZ131W8g/MRQGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/MWGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      cc490c5c919c9f04976a30ce6e006784a88e1b8066f72ee53f4bbb4b316f9d29N.exe

    • Size

      52KB

    • MD5

      cfe33c680fe739a357416c3e2e6b0900

    • SHA1

      3bac97f53a9c2e40639fff54f0664930fcef721b

    • SHA256

      cc490c5c919c9f04976a30ce6e006784a88e1b8066f72ee53f4bbb4b316f9d29

    • SHA512

      db5d836fb0fa58f89cc2716bfa33e903215e14d19ccf25b9378ecf3a426b033935cd3dd6210c66ddaaef4c3b222231078f9366b97659c65dc4f0fbed14e73fa2

    • SSDEEP

      768:QVMe3Vk9haLNFZ131W8g/MRQGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/MWGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks