General

  • Target

    43e669373cd75350ee74f95a17a8f145b1d87e78cb6b28c61c9cbbe212a61ac5N.exe

  • Size

    650KB

  • Sample

    241231-jv84sasjam

  • MD5

    bd86476284483227e2ff235c978d45c0

  • SHA1

    cd82b5eb0e1da57940afeab7f5681522504ba199

  • SHA256

    43e669373cd75350ee74f95a17a8f145b1d87e78cb6b28c61c9cbbe212a61ac5

  • SHA512

    6839564ab8eb2452fa3d49733c010ff9db376b5f316619692388e831b25c5b6b7ebf06ef7549076f5ab2cddfbff6b9fba79da39d0658a4a79ed0e190d5f40d6e

  • SSDEEP

    12288:RhMrzivePPYQmwPJKoXc8SM64DNRoXPirgSKzuq:jMHivMPUgSp4DNv0x

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      43e669373cd75350ee74f95a17a8f145b1d87e78cb6b28c61c9cbbe212a61ac5N.exe

    • Size

      650KB

    • MD5

      bd86476284483227e2ff235c978d45c0

    • SHA1

      cd82b5eb0e1da57940afeab7f5681522504ba199

    • SHA256

      43e669373cd75350ee74f95a17a8f145b1d87e78cb6b28c61c9cbbe212a61ac5

    • SHA512

      6839564ab8eb2452fa3d49733c010ff9db376b5f316619692388e831b25c5b6b7ebf06ef7549076f5ab2cddfbff6b9fba79da39d0658a4a79ed0e190d5f40d6e

    • SSDEEP

      12288:RhMrzivePPYQmwPJKoXc8SM64DNRoXPirgSKzuq:jMHivMPUgSp4DNv0x

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks