General

  • Target

    f25972fb00bcf47cff85444086fabac6ce99a8fcc9d0cf2fb1fcf27902647fdbN.exe

  • Size

    72KB

  • Sample

    250102-me3tlszqep

  • MD5

    588781f18c6c0b3d66a115b7ecb41d20

  • SHA1

    bc14ee5d6ac26d722e3fc1a39b9ec1f235e0b174

  • SHA256

    f25972fb00bcf47cff85444086fabac6ce99a8fcc9d0cf2fb1fcf27902647fdb

  • SHA512

    6830ce10d6482f495cb566ba597e8cf919f895696c003ad929ac09b02897c289c30edc47db0cae2b11ebe95e7f6c56fc4605b8738d616ffab4fac70be8f9d288

  • SSDEEP

    768:2/Gm1E9RVbStaqwqWvDjomVO/nUCAgls7+XjQGPL4vzZq2o9W7GsxBbPr:2/PVaqwJDPV+Rls7+X0GCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      f25972fb00bcf47cff85444086fabac6ce99a8fcc9d0cf2fb1fcf27902647fdbN.exe

    • Size

      72KB

    • MD5

      588781f18c6c0b3d66a115b7ecb41d20

    • SHA1

      bc14ee5d6ac26d722e3fc1a39b9ec1f235e0b174

    • SHA256

      f25972fb00bcf47cff85444086fabac6ce99a8fcc9d0cf2fb1fcf27902647fdb

    • SHA512

      6830ce10d6482f495cb566ba597e8cf919f895696c003ad929ac09b02897c289c30edc47db0cae2b11ebe95e7f6c56fc4605b8738d616ffab4fac70be8f9d288

    • SSDEEP

      768:2/Gm1E9RVbStaqwqWvDjomVO/nUCAgls7+XjQGPL4vzZq2o9W7GsxBbPr:2/PVaqwJDPV+Rls7+X0GCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks