General

  • Target

    5dfb1dc5f47ebd154381a69a1134bf4ffcdbe018cb65a9e80f8d97198403d4b1.exe

  • Size

    80KB

  • Sample

    250102-jaygjstjhr

  • MD5

    9d4cdee967a3918a3b61c24095452e0f

  • SHA1

    19d041037f061fbe32d50657f737e8ab7066ce5c

  • SHA256

    5dfb1dc5f47ebd154381a69a1134bf4ffcdbe018cb65a9e80f8d97198403d4b1

  • SHA512

    b142e86d58bec67b45f11bc937e0e3924f34feca170d380865d21e3647c94419472e7f1372bb24a8f7785194cec52b8d1b5ad050bb0891ebcc64bc9f10aed3de

  • SSDEEP

    1536:/JvJnBpwdaMIOOnToIfiV6pdQxSGCq2iW7z+:/JvxKaCqTBfiooUGCHS

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      5dfb1dc5f47ebd154381a69a1134bf4ffcdbe018cb65a9e80f8d97198403d4b1.exe

    • Size

      80KB

    • MD5

      9d4cdee967a3918a3b61c24095452e0f

    • SHA1

      19d041037f061fbe32d50657f737e8ab7066ce5c

    • SHA256

      5dfb1dc5f47ebd154381a69a1134bf4ffcdbe018cb65a9e80f8d97198403d4b1

    • SHA512

      b142e86d58bec67b45f11bc937e0e3924f34feca170d380865d21e3647c94419472e7f1372bb24a8f7785194cec52b8d1b5ad050bb0891ebcc64bc9f10aed3de

    • SSDEEP

      1536:/JvJnBpwdaMIOOnToIfiV6pdQxSGCq2iW7z+:/JvxKaCqTBfiooUGCHS

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks