General

  • Target

    09e46654599f47828922a281cdb26baac40326464709d544826c4a6edde51e63

  • Size

    1.1MB

  • Sample

    250106-v5gm3asng1

  • MD5

    e38ca9c8e2cb6780cabc4e1e9696f36a

  • SHA1

    3c2f5e320462c94cfc5d7d76548916bdb3a446de

  • SHA256

    09e46654599f47828922a281cdb26baac40326464709d544826c4a6edde51e63

  • SHA512

    7cb839bc46a402077454961408ac07c94c50d5b7e993c340e209f171b5b82f6e5811ccf217f4a42d35821b3a61a0b176ee96d7895be0d64c8d9f1df1f76c5aab

  • SSDEEP

    24576:z7S8lBHSSIh+lfMZqX9OAE0ie0Kb2AL8kZ7:XSaB4+ZN55L8

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      09e46654599f47828922a281cdb26baac40326464709d544826c4a6edde51e63

    • Size

      1.1MB

    • MD5

      e38ca9c8e2cb6780cabc4e1e9696f36a

    • SHA1

      3c2f5e320462c94cfc5d7d76548916bdb3a446de

    • SHA256

      09e46654599f47828922a281cdb26baac40326464709d544826c4a6edde51e63

    • SHA512

      7cb839bc46a402077454961408ac07c94c50d5b7e993c340e209f171b5b82f6e5811ccf217f4a42d35821b3a61a0b176ee96d7895be0d64c8d9f1df1f76c5aab

    • SSDEEP

      24576:z7S8lBHSSIh+lfMZqX9OAE0ie0Kb2AL8kZ7:XSaB4+ZN55L8

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks