General

  • Target

    a73c19d8a6dd9a19b7dd3e9eba088aac43e70a4bc3627506ab9aeb441e3f5d9c

  • Size

    12.0MB

  • Sample

    241225-2pm88szqfy

  • MD5

    086c6bb936a47c41a76eb567b4892b6e

  • SHA1

    631e9ae1343b7ca445100bdb56a81ae2802662bd

  • SHA256

    a73c19d8a6dd9a19b7dd3e9eba088aac43e70a4bc3627506ab9aeb441e3f5d9c

  • SHA512

    4b2699980a251c9aca7a490e498ff3035e479cb0b2971081414296e10a79e4e489481550bb57569c999bb5cdd00e1bcfa253eaac1bf50e5aa38600f23c1c6811

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zFFTCTMqQ:s/KU9/pyJx9Y5elR0T

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      a73c19d8a6dd9a19b7dd3e9eba088aac43e70a4bc3627506ab9aeb441e3f5d9c

    • Size

      12.0MB

    • MD5

      086c6bb936a47c41a76eb567b4892b6e

    • SHA1

      631e9ae1343b7ca445100bdb56a81ae2802662bd

    • SHA256

      a73c19d8a6dd9a19b7dd3e9eba088aac43e70a4bc3627506ab9aeb441e3f5d9c

    • SHA512

      4b2699980a251c9aca7a490e498ff3035e479cb0b2971081414296e10a79e4e489481550bb57569c999bb5cdd00e1bcfa253eaac1bf50e5aa38600f23c1c6811

    • SSDEEP

      49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zFFTCTMqQ:s/KU9/pyJx9Y5elR0T

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks