General

  • Target

    184ecb020160f3e46136307f2d35259946ee0d8da25fa10f4ec6780e620fc122

  • Size

    12.0MB

  • Sample

    241228-wa6t5szrfp

  • MD5

    197bedbab26b6f2ca95378249a4ff28c

  • SHA1

    1c04de6794fdb16dedd97879d8b468dc171d2a01

  • SHA256

    184ecb020160f3e46136307f2d35259946ee0d8da25fa10f4ec6780e620fc122

  • SHA512

    de14b3c653070d5a655c48d81ce6b65967a7fbf40a92fd8abad51787dafc9270d4251445a43e8c2ccc85360f1fbc86d177b97861e1c7d4bf49e66662216719ca

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zXFTCTMqQ:s/KU9/pyJx9Y5elz0T

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      184ecb020160f3e46136307f2d35259946ee0d8da25fa10f4ec6780e620fc122

    • Size

      12.0MB

    • MD5

      197bedbab26b6f2ca95378249a4ff28c

    • SHA1

      1c04de6794fdb16dedd97879d8b468dc171d2a01

    • SHA256

      184ecb020160f3e46136307f2d35259946ee0d8da25fa10f4ec6780e620fc122

    • SHA512

      de14b3c653070d5a655c48d81ce6b65967a7fbf40a92fd8abad51787dafc9270d4251445a43e8c2ccc85360f1fbc86d177b97861e1c7d4bf49e66662216719ca

    • SSDEEP

      49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zXFTCTMqQ:s/KU9/pyJx9Y5elz0T

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks