General

  • Target

    eedadfe1ed4b504c1acd956331b936d353e8bbf01a9c3072722551e6432427c4N.exe

  • Size

    385KB

  • Sample

    250101-sz5rlatjbr

  • MD5

    27d0b2030e8eea5c5d49a2f26c974b30

  • SHA1

    779b6b082a3921020bee88484df218470b1ce00e

  • SHA256

    eedadfe1ed4b504c1acd956331b936d353e8bbf01a9c3072722551e6432427c4

  • SHA512

    21a7aa9571d7726055a47bdb1f7c450499822c6cf6d69e955dd7f6bbdfbb24090af6560a970c6d9470f015f54f88d435c6f3c1b593107ee262cb6a4064e54dc5

  • SSDEEP

    3072:5yWaZWKJGr4oLiDO4xpSZOhnzOPq/m7mSgAQyVg07dzynsbj0rkKTy/ISahGCH:5yM14oL0Jp8WnzOi/zSc7azynLkDQSd

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      eedadfe1ed4b504c1acd956331b936d353e8bbf01a9c3072722551e6432427c4N.exe

    • Size

      385KB

    • MD5

      27d0b2030e8eea5c5d49a2f26c974b30

    • SHA1

      779b6b082a3921020bee88484df218470b1ce00e

    • SHA256

      eedadfe1ed4b504c1acd956331b936d353e8bbf01a9c3072722551e6432427c4

    • SHA512

      21a7aa9571d7726055a47bdb1f7c450499822c6cf6d69e955dd7f6bbdfbb24090af6560a970c6d9470f015f54f88d435c6f3c1b593107ee262cb6a4064e54dc5

    • SSDEEP

      3072:5yWaZWKJGr4oLiDO4xpSZOhnzOPq/m7mSgAQyVg07dzynsbj0rkKTy/ISahGCH:5yM14oL0Jp8WnzOi/zSc7azynLkDQSd

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks