General

  • Target

    e4506ced555bd0fd679386cdad960b3095fb58f50599c91f2a0ce241496d7a68.exe

  • Size

    96KB

  • Sample

    241231-2cbpnssmhs

  • MD5

    41c99e820034991e5ef3510d6d4ea592

  • SHA1

    ac65bea1f9ac08797c216337cf3337830907c807

  • SHA256

    e4506ced555bd0fd679386cdad960b3095fb58f50599c91f2a0ce241496d7a68

  • SHA512

    85c2f984b29c81082bc649b332ecfce23d9689aeffba063f8bcc24e3c1ff2170a809c2f306fb1ce6b44a31e227fa87946dd897fca3119c9c89e105701575a72d

  • SSDEEP

    1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1PiGCq2iW7zq:pJLrp0cQ7QAINqPDHQnchGCHm

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      e4506ced555bd0fd679386cdad960b3095fb58f50599c91f2a0ce241496d7a68.exe

    • Size

      96KB

    • MD5

      41c99e820034991e5ef3510d6d4ea592

    • SHA1

      ac65bea1f9ac08797c216337cf3337830907c807

    • SHA256

      e4506ced555bd0fd679386cdad960b3095fb58f50599c91f2a0ce241496d7a68

    • SHA512

      85c2f984b29c81082bc649b332ecfce23d9689aeffba063f8bcc24e3c1ff2170a809c2f306fb1ce6b44a31e227fa87946dd897fca3119c9c89e105701575a72d

    • SSDEEP

      1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1PiGCq2iW7zq:pJLrp0cQ7QAINqPDHQnchGCHm

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks