General

  • Target

    b98c41131ca7949e486084ede9cd559d59e7e44a29c5e3f7cb56a24280372bef

  • Size

    12.0MB

  • Sample

    241225-2nwtzszqd1

  • MD5

    10f4dd56b12c3a1a89c142ddef138c8e

  • SHA1

    2dc73de645ebf3f82b744c549cadfdebcd6122b8

  • SHA256

    b98c41131ca7949e486084ede9cd559d59e7e44a29c5e3f7cb56a24280372bef

  • SHA512

    5ebdb1d06750e64a61d03efc490858e595c4b777ad22560298b079557e55e17b351eb2e54d5d635459484fd4ee9ff7025bc955654c21214ed32eb08ad552a87e

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zGFTCTMqQ:s/KU9/pyJx9Y5elq0T

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      b98c41131ca7949e486084ede9cd559d59e7e44a29c5e3f7cb56a24280372bef

    • Size

      12.0MB

    • MD5

      10f4dd56b12c3a1a89c142ddef138c8e

    • SHA1

      2dc73de645ebf3f82b744c549cadfdebcd6122b8

    • SHA256

      b98c41131ca7949e486084ede9cd559d59e7e44a29c5e3f7cb56a24280372bef

    • SHA512

      5ebdb1d06750e64a61d03efc490858e595c4b777ad22560298b079557e55e17b351eb2e54d5d635459484fd4ee9ff7025bc955654c21214ed32eb08ad552a87e

    • SSDEEP

      49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zGFTCTMqQ:s/KU9/pyJx9Y5elq0T

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks