Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    1a42393fbd967215cf042a4cbd7780803c793fb560d431dff0c3cc28a7bdedd2.exe

  • Size

    385KB

  • Sample

    250101-3cjkyssmfq

  • MD5

    c09e652831ba60c04290760d30e970db

  • SHA1

    cc468ccb6f50ca5d2264b862cd055db64649a677

  • SHA256

    1a42393fbd967215cf042a4cbd7780803c793fb560d431dff0c3cc28a7bdedd2

  • SHA512

    132bda48bde91a72162d080823281c673b1a6ac97566fbcd1d65ee8a5f589926ce5f426f73b7dc41b70474beafbfa8b0a513f751977105c16b34b714621ab07d

  • SSDEEP

    3072:5yWaZWKJGr4oLiDO4xpSZOhnzOPq/m7mSgAQyVg07dzynsbj0rkKTy/ISahGCHy:5yM14oL0Jp8WnzOi/zSc7azynLkDQSd/

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      1a42393fbd967215cf042a4cbd7780803c793fb560d431dff0c3cc28a7bdedd2.exe

    • Size

      385KB

    • MD5

      c09e652831ba60c04290760d30e970db

    • SHA1

      cc468ccb6f50ca5d2264b862cd055db64649a677

    • SHA256

      1a42393fbd967215cf042a4cbd7780803c793fb560d431dff0c3cc28a7bdedd2

    • SHA512

      132bda48bde91a72162d080823281c673b1a6ac97566fbcd1d65ee8a5f589926ce5f426f73b7dc41b70474beafbfa8b0a513f751977105c16b34b714621ab07d

    • SSDEEP

      3072:5yWaZWKJGr4oLiDO4xpSZOhnzOPq/m7mSgAQyVg07dzynsbj0rkKTy/ISahGCHy:5yM14oL0Jp8WnzOi/zSc7azynLkDQSd/

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks