General

  • Target

    6d89a99510a6172e9ed4829f63b95971a3caf09f6df8faa5b1fe6bc79c0abe0aN.exe

  • Size

    452KB

  • Sample

    250104-hxknjazran

  • MD5

    b5e39fa240670ce47287aea2692b0eb0

  • SHA1

    3460b33a8714cd946a5e7a55d23ca0728541829a

  • SHA256

    6d89a99510a6172e9ed4829f63b95971a3caf09f6df8faa5b1fe6bc79c0abe0a

  • SHA512

    aed6be4508e14f85fd637d5a0c2ad384d93f342a435e8954461f09b294fb20d6f41e30d9986228b73cd4296a3d8584efb3b64b85a75c7b1896291ad94c9404c3

  • SSDEEP

    12288:ma5nmns2C5E9KYS2wiMUIgdNdsfmBvgwjo:QSOMj4NWW4m

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      6d89a99510a6172e9ed4829f63b95971a3caf09f6df8faa5b1fe6bc79c0abe0aN.exe

    • Size

      452KB

    • MD5

      b5e39fa240670ce47287aea2692b0eb0

    • SHA1

      3460b33a8714cd946a5e7a55d23ca0728541829a

    • SHA256

      6d89a99510a6172e9ed4829f63b95971a3caf09f6df8faa5b1fe6bc79c0abe0a

    • SHA512

      aed6be4508e14f85fd637d5a0c2ad384d93f342a435e8954461f09b294fb20d6f41e30d9986228b73cd4296a3d8584efb3b64b85a75c7b1896291ad94c9404c3

    • SSDEEP

      12288:ma5nmns2C5E9KYS2wiMUIgdNdsfmBvgwjo:QSOMj4NWW4m

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks