General

  • Target

    ab2e20f7862ecacd6685fb135b15af3e918f4899bbda0118ef564e0031f0e45eN.exe

  • Size

    80KB

  • Sample

    250102-h3z1easpel

  • MD5

    b4fe1ae691b566af4e63f99c5543e720

  • SHA1

    9f36feed04788d6ebb1fe000df004d5f04aef23b

  • SHA256

    ab2e20f7862ecacd6685fb135b15af3e918f4899bbda0118ef564e0031f0e45e

  • SHA512

    4ade2a35146dcb650ecb57eed3dd64561024eb423892921e3bce72d73a4f18bbac51134861c2e62efb6534376ada9b159e517983621d9304bf2ca5ecdafe78ad

  • SSDEEP

    1536:/JvJnBpwdaMIOOnToIfiV6pdQxSGCq2iW7z:/JvxKaCqTBfiooUGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      ab2e20f7862ecacd6685fb135b15af3e918f4899bbda0118ef564e0031f0e45eN.exe

    • Size

      80KB

    • MD5

      b4fe1ae691b566af4e63f99c5543e720

    • SHA1

      9f36feed04788d6ebb1fe000df004d5f04aef23b

    • SHA256

      ab2e20f7862ecacd6685fb135b15af3e918f4899bbda0118ef564e0031f0e45e

    • SHA512

      4ade2a35146dcb650ecb57eed3dd64561024eb423892921e3bce72d73a4f18bbac51134861c2e62efb6534376ada9b159e517983621d9304bf2ca5ecdafe78ad

    • SSDEEP

      1536:/JvJnBpwdaMIOOnToIfiV6pdQxSGCq2iW7z:/JvxKaCqTBfiooUGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks