General

  • Target

    f7e72ecf28742461e629ec991ea31e4cf9c1921bc9ecebee65ba4e5303a1597a.exe

  • Size

    96KB

  • Sample

    241231-wxedeasncx

  • MD5

    22dad73d02ea4ac622202fc65b95f216

  • SHA1

    c3cf1e710a14ed6932ee20d7ae90e2d831ccfe30

  • SHA256

    f7e72ecf28742461e629ec991ea31e4cf9c1921bc9ecebee65ba4e5303a1597a

  • SHA512

    367d8383bbbb08135abdacdb62fe8a230526037570b3111968b4a3dbcafc3f89218ce15ddefda68d1dee30f8912872e09b6bcb89f48084630ae5cc84dbb10605

  • SSDEEP

    1536:MqPjvlpp/06w6Px9+3cu9V+gKbbGCq2iW7za:MqPL1/7w6ZAs+VBKXGCH2

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      f7e72ecf28742461e629ec991ea31e4cf9c1921bc9ecebee65ba4e5303a1597a.exe

    • Size

      96KB

    • MD5

      22dad73d02ea4ac622202fc65b95f216

    • SHA1

      c3cf1e710a14ed6932ee20d7ae90e2d831ccfe30

    • SHA256

      f7e72ecf28742461e629ec991ea31e4cf9c1921bc9ecebee65ba4e5303a1597a

    • SHA512

      367d8383bbbb08135abdacdb62fe8a230526037570b3111968b4a3dbcafc3f89218ce15ddefda68d1dee30f8912872e09b6bcb89f48084630ae5cc84dbb10605

    • SSDEEP

      1536:MqPjvlpp/06w6Px9+3cu9V+gKbbGCq2iW7za:MqPL1/7w6ZAs+VBKXGCH2

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks