General

  • Target

    251a6f9640eec9ea5a02102003ace3e7a071246b58d194f3752e4e69f0697ebbN.exe

  • Size

    141KB

  • Sample

    241230-29zg1atkfp

  • MD5

    7fcd8e159eee00ae5910d2dcf2ae2e10

  • SHA1

    69422baa84641f3d1117f09fb0d461068977c266

  • SHA256

    251a6f9640eec9ea5a02102003ace3e7a071246b58d194f3752e4e69f0697ebb

  • SHA512

    722bb0115a98cbe18d0e568f18f953192e4052d8e4d23c4bafa2b99d5ea7af5a05cda7acd07d17dbc4d829120e0c35f571eb671ccd2e2d2eca6898f90475bf63

  • SSDEEP

    1536:BKnrXO3fbLMkihYSVRHSKv2UV9MsPJ+ff0XdBch52KYopz871GCq2iW7z:B3TLsbrR3V9JZtS52KYopz85GCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      251a6f9640eec9ea5a02102003ace3e7a071246b58d194f3752e4e69f0697ebbN.exe

    • Size

      141KB

    • MD5

      7fcd8e159eee00ae5910d2dcf2ae2e10

    • SHA1

      69422baa84641f3d1117f09fb0d461068977c266

    • SHA256

      251a6f9640eec9ea5a02102003ace3e7a071246b58d194f3752e4e69f0697ebb

    • SHA512

      722bb0115a98cbe18d0e568f18f953192e4052d8e4d23c4bafa2b99d5ea7af5a05cda7acd07d17dbc4d829120e0c35f571eb671ccd2e2d2eca6898f90475bf63

    • SSDEEP

      1536:BKnrXO3fbLMkihYSVRHSKv2UV9MsPJ+ff0XdBch52KYopz871GCq2iW7z:B3TLsbrR3V9JZtS52KYopz85GCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks