General

  • Target

    e548bbe7c3646eee409ba30466ecf5ed75c74699808fa98718d713709962062a

  • Size

    12.0MB

  • Sample

    241225-2q17gs1lbp

  • MD5

    d2f051fd1240fce1abc7eca751a4799e

  • SHA1

    692b8434d3ec483d722e27bfba0b3178a7da4e2e

  • SHA256

    e548bbe7c3646eee409ba30466ecf5ed75c74699808fa98718d713709962062a

  • SHA512

    f8be5979a2ec5e50872f884250f472a7e34715bb7f3800267e68f188bd39347ab166cfc62756e540a64ca194f1ca68c91e63506d46663878d77eea3481b3a857

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zCFTCTMqQ:s/KU9/pyJx9Y5ele0T

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      e548bbe7c3646eee409ba30466ecf5ed75c74699808fa98718d713709962062a

    • Size

      12.0MB

    • MD5

      d2f051fd1240fce1abc7eca751a4799e

    • SHA1

      692b8434d3ec483d722e27bfba0b3178a7da4e2e

    • SHA256

      e548bbe7c3646eee409ba30466ecf5ed75c74699808fa98718d713709962062a

    • SHA512

      f8be5979a2ec5e50872f884250f472a7e34715bb7f3800267e68f188bd39347ab166cfc62756e540a64ca194f1ca68c91e63506d46663878d77eea3481b3a857

    • SSDEEP

      49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zCFTCTMqQ:s/KU9/pyJx9Y5ele0T

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks