General

  • Target

    2024-12-25_b0e11cdafd928e9ab7266a4dd8fe2acd_mafia_wapomi

  • Size

    1.6MB

  • Sample

    241225-rrwy2svmhz

  • MD5

    b0e11cdafd928e9ab7266a4dd8fe2acd

  • SHA1

    2555169ab8aa8ee6f4f8d9fa3c8812b63acbb0c5

  • SHA256

    1245acd2ab8996d3de89c9c19ec60582b844c11d0572ddb5b0cdf9a34c08839f

  • SHA512

    e2c1b2f146a9c75fc8f85f9f2ca52d52ad488042950cc1f1d12ad9509e130577c51311e55e1791e017b073118cc0750575c79b8b266bf722c4c8bb5a67d7476d

  • SSDEEP

    49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2024-12-25_b0e11cdafd928e9ab7266a4dd8fe2acd_mafia_wapomi

    • Size

      1.6MB

    • MD5

      b0e11cdafd928e9ab7266a4dd8fe2acd

    • SHA1

      2555169ab8aa8ee6f4f8d9fa3c8812b63acbb0c5

    • SHA256

      1245acd2ab8996d3de89c9c19ec60582b844c11d0572ddb5b0cdf9a34c08839f

    • SHA512

      e2c1b2f146a9c75fc8f85f9f2ca52d52ad488042950cc1f1d12ad9509e130577c51311e55e1791e017b073118cc0750575c79b8b266bf722c4c8bb5a67d7476d

    • SSDEEP

      49152:XE4XbjEKOh3SbiwJjn7gu5LUvdW9apuLvht/cionurM0EIMa1:Xrj834iwJjn7gu5LmMapuNiiMurM0

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks