General

  • Target

    f74c46647d8e598ac9fa398f50e31d63383fa4c60e3aed1576a23eac687b9b00N.exe

  • Size

    104KB

  • Sample

    241231-z6jahaslfj

  • MD5

    d02330867f2adf19ffdc2942c4e1f570

  • SHA1

    e897b4879c88794dd0a4b7f0648b7c901014ff79

  • SHA256

    f74c46647d8e598ac9fa398f50e31d63383fa4c60e3aed1576a23eac687b9b00

  • SHA512

    c02c60ccac38abfce6782deb190d831f446112ea730de31cfbc046c3962c14ec5308c5bf5cf8c2b51b9e6ae33ff24a01c3080644ac3f35953a6a0c21b48c3f9c

  • SSDEEP

    1536:DFEL0c3++wG5NlKOln9N7oKsMmuB2IMokC+0FfHYToSMygGCq2iW7z:DFUxlnjmDXokC+GfHYToSMTGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      f74c46647d8e598ac9fa398f50e31d63383fa4c60e3aed1576a23eac687b9b00N.exe

    • Size

      104KB

    • MD5

      d02330867f2adf19ffdc2942c4e1f570

    • SHA1

      e897b4879c88794dd0a4b7f0648b7c901014ff79

    • SHA256

      f74c46647d8e598ac9fa398f50e31d63383fa4c60e3aed1576a23eac687b9b00

    • SHA512

      c02c60ccac38abfce6782deb190d831f446112ea730de31cfbc046c3962c14ec5308c5bf5cf8c2b51b9e6ae33ff24a01c3080644ac3f35953a6a0c21b48c3f9c

    • SSDEEP

      1536:DFEL0c3++wG5NlKOln9N7oKsMmuB2IMokC+0FfHYToSMygGCq2iW7z:DFUxlnjmDXokC+GfHYToSMTGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks