General

  • Target

    65214c3035c0f49f04a69d0c23f90f5b2b0135b706991ce5a9842fc6e4a077ed.exe

  • Size

    80KB

  • Sample

    241229-ctnm5azkcm

  • MD5

    93bc13a5ccf808ac29d512748221ce1d

  • SHA1

    bff2313cab29f6301d4131eb2f211d4b26743a90

  • SHA256

    65214c3035c0f49f04a69d0c23f90f5b2b0135b706991ce5a9842fc6e4a077ed

  • SHA512

    342d40e8b5cce907f02123c1eec89bc18233468a7c7bba7c3b180de4a05fdc1996d509545129db8e9207cfa70b8eced8798633f6ce82c75c399a680bb655da37

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQwZGCq2iW7z:Hk3U8kTQUGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      65214c3035c0f49f04a69d0c23f90f5b2b0135b706991ce5a9842fc6e4a077ed.exe

    • Size

      80KB

    • MD5

      93bc13a5ccf808ac29d512748221ce1d

    • SHA1

      bff2313cab29f6301d4131eb2f211d4b26743a90

    • SHA256

      65214c3035c0f49f04a69d0c23f90f5b2b0135b706991ce5a9842fc6e4a077ed

    • SHA512

      342d40e8b5cce907f02123c1eec89bc18233468a7c7bba7c3b180de4a05fdc1996d509545129db8e9207cfa70b8eced8798633f6ce82c75c399a680bb655da37

    • SSDEEP

      1536:Yg/6/tM8NXDjPX0QWlfGMckTQwZGCq2iW7z:Hk3U8kTQUGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks