bdaejec

General

Target

95a04a062751f5f2219594c65bd7c9cf54eeb1f0ada6718917dfee8df07fbaeaN.exe
Size

3.9MB
Sample

250104-w2ymvatjdm
MD5

04c4b83240909383dacaa100a6885180
SHA1

12127b7255f4fbbb1d1ce2198bf7f038de51543d
SHA256

95a04a062751f5f2219594c65bd7c9cf54eeb1f0ada6718917dfee8df07fbaea
SHA512

38a41c7825d643c82514b8c926ed30d876f5fcc79208c875e32770eb80234f1e49466ebd1ab3b2272e72c103e4900baff4ee28ee17b281abcd1e90d943651cba
SSDEEP

49152:AKKfHPZ6IVMv76K8ocsCGzzJ7UDv7zuBcLAqw1Gjg+A2deCMmwV/vJu2mWG2mrk:A/fh6ImzzJoDfuBcMv+A73XA

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  
  95a04a062751f5f2219594c65bd7c9cf54eeb1f0ada6718917dfee8df07fbaeaN.exe
- Size
  
  3.9MB
- MD5
  
  04c4b83240909383dacaa100a6885180
- SHA1
  
  12127b7255f4fbbb1d1ce2198bf7f038de51543d
- SHA256
  
  95a04a062751f5f2219594c65bd7c9cf54eeb1f0ada6718917dfee8df07fbaea
- SHA512
  
  38a41c7825d643c82514b8c926ed30d876f5fcc79208c875e32770eb80234f1e49466ebd1ab3b2272e72c103e4900baff4ee28ee17b281abcd1e90d943651cba
- SSDEEP
  
  49152:AKKfHPZ6IVMv76K8ocsCGzzJ7UDv7zuBcLAqw1Gjg+A2deCMmwV/vJu2mWG2mrk:A/fh6ImzzJoDfuBcMv+A73XA
Score

10^/10

bdaejec aspackv2 backdoor discovery
- Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Bdaejec family
  bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Bdaejec family

Detects Bdaejec Backdoor.

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

We care about your privacy.