General

  • Target

    7bf58530345f0e76e71f89d899ecf5cbdc7a53086bb57bd4f4335fd66a81dd82N.exe

  • Size

    96KB

  • Sample

    241231-1cxfpsspdq

  • MD5

    b1ae62e31bfc8ffcd79ebf8d6ff29170

  • SHA1

    3ded17d8e991b9d45e8cbc660000e94b351f6263

  • SHA256

    7bf58530345f0e76e71f89d899ecf5cbdc7a53086bb57bd4f4335fd66a81dd82

  • SHA512

    9ba4a044c71d5eb1f25f471c79c1e94953b85414e213fcc908035eb9cd9d56856b5f2ea9fc8d01c78d32119fa9131e0c4cb6a03ef0f6ed5e3a7d7ce0f91bf10c

  • SSDEEP

    1536:MqPjvlpp/06w6Px9+3cu9V+gKbbGCq2iW7z:MqPL1/7w6ZAs+VBKXGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      7bf58530345f0e76e71f89d899ecf5cbdc7a53086bb57bd4f4335fd66a81dd82N.exe

    • Size

      96KB

    • MD5

      b1ae62e31bfc8ffcd79ebf8d6ff29170

    • SHA1

      3ded17d8e991b9d45e8cbc660000e94b351f6263

    • SHA256

      7bf58530345f0e76e71f89d899ecf5cbdc7a53086bb57bd4f4335fd66a81dd82

    • SHA512

      9ba4a044c71d5eb1f25f471c79c1e94953b85414e213fcc908035eb9cd9d56856b5f2ea9fc8d01c78d32119fa9131e0c4cb6a03ef0f6ed5e3a7d7ce0f91bf10c

    • SSDEEP

      1536:MqPjvlpp/06w6Px9+3cu9V+gKbbGCq2iW7z:MqPL1/7w6ZAs+VBKXGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks