General

  • Target

    8a2be8b987ef5bfa48ebadd552e7ee55c7910fd805abc38773a98a330de61e1d

  • Size

    12.0MB

  • Sample

    241228-we93csznax

  • MD5

    00781601407e4d52723f37b8a720b4bd

  • SHA1

    3416c27ca9af798f84e6994f0d8a54896cb256d6

  • SHA256

    8a2be8b987ef5bfa48ebadd552e7ee55c7910fd805abc38773a98a330de61e1d

  • SHA512

    4fa965e021159ea3fb805bc3a12de682d002f4cb3d0ca42b7c6cdc97d722a030c0c7e26cc65a19011fb2fc470a8a7ae53cd77472b448e91dab0fa310fbc37951

  • SSDEEP

    49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zOFTCTMqQ:s/KU9/pyJx9Y5ela0T

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      8a2be8b987ef5bfa48ebadd552e7ee55c7910fd805abc38773a98a330de61e1d

    • Size

      12.0MB

    • MD5

      00781601407e4d52723f37b8a720b4bd

    • SHA1

      3416c27ca9af798f84e6994f0d8a54896cb256d6

    • SHA256

      8a2be8b987ef5bfa48ebadd552e7ee55c7910fd805abc38773a98a330de61e1d

    • SHA512

      4fa965e021159ea3fb805bc3a12de682d002f4cb3d0ca42b7c6cdc97d722a030c0c7e26cc65a19011fb2fc470a8a7ae53cd77472b448e91dab0fa310fbc37951

    • SSDEEP

      49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zOFTCTMqQ:s/KU9/pyJx9Y5ela0T

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks