General

  • Target

    7a119689be42e9b0b012084180e7f73afe0d4b75bad19da32ba2d322eeec24d0

  • Size

    12.0MB

  • Sample

    241228-wb11aazrhj

  • MD5

    8e108ac2fe0f2fd5bf0974bb06af1ea2

  • SHA1

    d9b4f639a5b059b688345a8694696eb4e54383b1

  • SHA256

    7a119689be42e9b0b012084180e7f73afe0d4b75bad19da32ba2d322eeec24d0

  • SHA512

    466ff4e330770281d4f57f529c58d2c493ae1d7755c887529f481418dc223360aa0ecc2a8de721ab326c6dd31a3b9cf04dd1d728ca138a8c06017385377ef476

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zlFTCTMqQ:s/KU9/pyJx9Y5elx0T

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      7a119689be42e9b0b012084180e7f73afe0d4b75bad19da32ba2d322eeec24d0

    • Size

      12.0MB

    • MD5

      8e108ac2fe0f2fd5bf0974bb06af1ea2

    • SHA1

      d9b4f639a5b059b688345a8694696eb4e54383b1

    • SHA256

      7a119689be42e9b0b012084180e7f73afe0d4b75bad19da32ba2d322eeec24d0

    • SHA512

      466ff4e330770281d4f57f529c58d2c493ae1d7755c887529f481418dc223360aa0ecc2a8de721ab326c6dd31a3b9cf04dd1d728ca138a8c06017385377ef476

    • SSDEEP

      49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zlFTCTMqQ:s/KU9/pyJx9Y5elx0T

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks