General

  • Target

    734218ba8f1507bab801818afb9047c8477e51ae41ae32d4abf407d96e777de1N.exe

  • Size

    80KB

  • Sample

    250101-xxv7layqhy

  • MD5

    3e0b5d63a01ca7c6e327331bf7526d70

  • SHA1

    ea6f02a39d22e96a66695c745436d941d7541c41

  • SHA256

    734218ba8f1507bab801818afb9047c8477e51ae41ae32d4abf407d96e777de1

  • SHA512

    655c404f5a144e8d7f62355a4080f544aa07f087e994415f7c147694ecdd64c0adeffa501cbefa18ae815057df9cf392ca4f7c5384a8470b4ec27f4ce3690edd

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQcGGCq2iW7z:Y3ysTGhQHGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      734218ba8f1507bab801818afb9047c8477e51ae41ae32d4abf407d96e777de1N.exe

    • Size

      80KB

    • MD5

      3e0b5d63a01ca7c6e327331bf7526d70

    • SHA1

      ea6f02a39d22e96a66695c745436d941d7541c41

    • SHA256

      734218ba8f1507bab801818afb9047c8477e51ae41ae32d4abf407d96e777de1

    • SHA512

      655c404f5a144e8d7f62355a4080f544aa07f087e994415f7c147694ecdd64c0adeffa501cbefa18ae815057df9cf392ca4f7c5384a8470b4ec27f4ce3690edd

    • SSDEEP

      1536:RfnLq01weW5yX3jFxv49Nu4GhQcGGCq2iW7z:Y3ysTGhQHGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks