General

  • Target

    bfd0a2a129de0595932032530412d43fa29a976015f939e400dbcdc6f80c14c0N.exe

  • Size

    96KB

  • Sample

    241231-j1aheatlhp

  • MD5

    ca68fc0f50ef68ba3f9a2bf45c065790

  • SHA1

    3bbf4ec8c78b5c92cf37c8b492c670c5bcbe5b53

  • SHA256

    bfd0a2a129de0595932032530412d43fa29a976015f939e400dbcdc6f80c14c0

  • SHA512

    271060a40ac97290e4f0bee17855a387cdeee26b427bb3f4f3a51b6316e01d7821321998b6e441cdbd33f82bc25a4b68853c208abb4c88b31df49ea134a709ba

  • SSDEEP

    1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1PiGCq2iW7z:pJLrp0cQ7QAINqPDHQnchGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      bfd0a2a129de0595932032530412d43fa29a976015f939e400dbcdc6f80c14c0N.exe

    • Size

      96KB

    • MD5

      ca68fc0f50ef68ba3f9a2bf45c065790

    • SHA1

      3bbf4ec8c78b5c92cf37c8b492c670c5bcbe5b53

    • SHA256

      bfd0a2a129de0595932032530412d43fa29a976015f939e400dbcdc6f80c14c0

    • SHA512

      271060a40ac97290e4f0bee17855a387cdeee26b427bb3f4f3a51b6316e01d7821321998b6e441cdbd33f82bc25a4b68853c208abb4c88b31df49ea134a709ba

    • SSDEEP

      1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1PiGCq2iW7z:pJLrp0cQ7QAINqPDHQnchGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks