General

  • Target

    6ad7e53a2be770f646ef21fd5bcee00b71479a733937856b0f6d9132b8dc4521.exe

  • Size

    91KB

  • Sample

    241231-bjasvazlbs

  • MD5

    b7db3fa0c089cd47d831b6c1d4d212a9

  • SHA1

    06924776a0ddcffda8ce5c1d08c46488937df678

  • SHA256

    6ad7e53a2be770f646ef21fd5bcee00b71479a733937856b0f6d9132b8dc4521

  • SHA512

    d5961517bcc0b5a33fdf1ec8a6047723ffc48a2bd5b139400bdd007a8fc6b2bbc11b40dc4f3f8d7f6f227f0276363f0c571c04ef9a0191bbca93a552f78db487

  • SSDEEP

    1536:jiq1GxAg85me0rfAJMsa2tjdMF4O7WV2XmatGCq2iW7z+:jiqExAf5me0rfAJMsa2hyRWV2vtGCHS

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      6ad7e53a2be770f646ef21fd5bcee00b71479a733937856b0f6d9132b8dc4521.exe

    • Size

      91KB

    • MD5

      b7db3fa0c089cd47d831b6c1d4d212a9

    • SHA1

      06924776a0ddcffda8ce5c1d08c46488937df678

    • SHA256

      6ad7e53a2be770f646ef21fd5bcee00b71479a733937856b0f6d9132b8dc4521

    • SHA512

      d5961517bcc0b5a33fdf1ec8a6047723ffc48a2bd5b139400bdd007a8fc6b2bbc11b40dc4f3f8d7f6f227f0276363f0c571c04ef9a0191bbca93a552f78db487

    • SSDEEP

      1536:jiq1GxAg85me0rfAJMsa2tjdMF4O7WV2XmatGCq2iW7z+:jiqExAf5me0rfAJMsa2hyRWV2vtGCHS

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks