General

  • Target

    b3650ef722cbd5c0e34901847d9cf6a5cbdd2e4e076dd28f8d831ecd772ce92f.exe

  • Size

    303KB

  • Sample

    250102-c97qya1qhp

  • MD5

    505370698d0db4fb9b70ceb3d6b38068

  • SHA1

    63504adaedb8ab737cd3ecfffe6863b4cf64ebae

  • SHA256

    b3650ef722cbd5c0e34901847d9cf6a5cbdd2e4e076dd28f8d831ecd772ce92f

  • SHA512

    567d8ddafff5cf187da8974f76bc41909a7605b508685a619596b3ae1524ff2b1445882873df69c713d6d94840cc3e91f399c7db56da87b3849e5375be97c964

  • SSDEEP

    6144:RdZiP3k3YeDgU5nMNsDQzcmGxF1RYTc3fD8Xhwm3zdiMMKpLIn:RdZc0lp4PzanGQ3fAC2MoA

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      b3650ef722cbd5c0e34901847d9cf6a5cbdd2e4e076dd28f8d831ecd772ce92f.exe

    • Size

      303KB

    • MD5

      505370698d0db4fb9b70ceb3d6b38068

    • SHA1

      63504adaedb8ab737cd3ecfffe6863b4cf64ebae

    • SHA256

      b3650ef722cbd5c0e34901847d9cf6a5cbdd2e4e076dd28f8d831ecd772ce92f

    • SHA512

      567d8ddafff5cf187da8974f76bc41909a7605b508685a619596b3ae1524ff2b1445882873df69c713d6d94840cc3e91f399c7db56da87b3849e5375be97c964

    • SSDEEP

      6144:RdZiP3k3YeDgU5nMNsDQzcmGxF1RYTc3fD8Xhwm3zdiMMKpLIn:RdZc0lp4PzanGQ3fAC2MoA

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks