General

  • Target

    9b7c367f914437875c585a0228033e6fbaf7c69f747751a726698a6a4271863bN.exe

  • Size

    62KB

  • Sample

    241231-l4acxsvqbt

  • MD5

    be38160d3742c8b77c46e2ad34c59b40

  • SHA1

    6b4c741d60bb8d10b6fb4d3470e360c77b2e4228

  • SHA256

    9b7c367f914437875c585a0228033e6fbaf7c69f747751a726698a6a4271863b

  • SHA512

    e07d1be0b9cc348dca1d37d9cf0fe08d501a51abba43754f66e3dab602a5994dbb77092da65a4702070e60430068bdf205b5377c67f97e884ec63151292a870e

  • SSDEEP

    768:MEcy9908dqax/5FdC72/WkFkwUEihlLBHCnp+KCIvLQGPL4vzZq2o9W7GsxBbPr:Vcy9Pn/LdnFFlUEulElvsGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      9b7c367f914437875c585a0228033e6fbaf7c69f747751a726698a6a4271863bN.exe

    • Size

      62KB

    • MD5

      be38160d3742c8b77c46e2ad34c59b40

    • SHA1

      6b4c741d60bb8d10b6fb4d3470e360c77b2e4228

    • SHA256

      9b7c367f914437875c585a0228033e6fbaf7c69f747751a726698a6a4271863b

    • SHA512

      e07d1be0b9cc348dca1d37d9cf0fe08d501a51abba43754f66e3dab602a5994dbb77092da65a4702070e60430068bdf205b5377c67f97e884ec63151292a870e

    • SSDEEP

      768:MEcy9908dqax/5FdC72/WkFkwUEihlLBHCnp+KCIvLQGPL4vzZq2o9W7GsxBbPr:Vcy9Pn/LdnFFlUEulElvsGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks