General

  • Target

    2a72afe6eb783cf0b9bcea82b6e4fa87ba8e6d94a11908e60dee87517446224e

  • Size

    141KB

  • Sample

    241220-k9df4atrhz

  • MD5

    4dae1ddd256a815242b9f6d6f8c8ddec

  • SHA1

    fe4c65aea8d7da1ad89213f7cbeecaa909436825

  • SHA256

    2a72afe6eb783cf0b9bcea82b6e4fa87ba8e6d94a11908e60dee87517446224e

  • SHA512

    64b66c837050d1ccaa92e3ccf3083b0754bf0c039941f91e09dfef5765a6d006d52512d2bf05e135b13b9c26a267e519d6b203e88a5313aa5d6926143c1c64e7

  • SSDEEP

    3072:pc/QPqpDnKYSO40L58FvumU9aDtxG12X85cXaGCH:IQPq1nKLOxCM4A2Xvr

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2a72afe6eb783cf0b9bcea82b6e4fa87ba8e6d94a11908e60dee87517446224e

    • Size

      141KB

    • MD5

      4dae1ddd256a815242b9f6d6f8c8ddec

    • SHA1

      fe4c65aea8d7da1ad89213f7cbeecaa909436825

    • SHA256

      2a72afe6eb783cf0b9bcea82b6e4fa87ba8e6d94a11908e60dee87517446224e

    • SHA512

      64b66c837050d1ccaa92e3ccf3083b0754bf0c039941f91e09dfef5765a6d006d52512d2bf05e135b13b9c26a267e519d6b203e88a5313aa5d6926143c1c64e7

    • SSDEEP

      3072:pc/QPqpDnKYSO40L58FvumU9aDtxG12X85cXaGCH:IQPq1nKLOxCM4A2Xvr

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks