General

  • Target

    2025-01-02_c00bf083f050fb5d35b97bceb47f242e_wannacry_wapomi

  • Size

    3.6MB

  • Sample

    250102-2b1x6sxrcx

  • MD5

    c00bf083f050fb5d35b97bceb47f242e

  • SHA1

    4685e6d474c6576ea40514ab922514319031fb5c

  • SHA256

    55674c75630907c55ad91d1d1b85eaec7afabf8125c77057986da85eeb04083f

  • SHA512

    9911c5084c3872707f77be315d9a011c01645ad90d7b8061c869f165ef727a6573c798c958934c833214ae6618468c06552224da882042e218d6e3b1abc71f38

  • SSDEEP

    98304:iDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:iDqPe1Cxcxk3ZAEUadzR8yc4H

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-01-02_c00bf083f050fb5d35b97bceb47f242e_wannacry_wapomi

    • Size

      3.6MB

    • MD5

      c00bf083f050fb5d35b97bceb47f242e

    • SHA1

      4685e6d474c6576ea40514ab922514319031fb5c

    • SHA256

      55674c75630907c55ad91d1d1b85eaec7afabf8125c77057986da85eeb04083f

    • SHA512

      9911c5084c3872707f77be315d9a011c01645ad90d7b8061c869f165ef727a6573c798c958934c833214ae6618468c06552224da882042e218d6e3b1abc71f38

    • SSDEEP

      98304:iDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2H:iDqPe1Cxcxk3ZAEUadzR8yc4H

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • Modifies firewall policy service

    • Drops file in Drivers directory

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks