General

  • Target

    86ff6e676d7f9153f193fdcb967074ca5cb4a5cf41901088faba03e2765a552a

  • Size

    1.1MB

  • Sample

    250106-v67wmsvlfq

  • MD5

    57050c15ea172306c5306829480bcfe7

  • SHA1

    0235890e55c39ab040613eed2e4457f3b058dad9

  • SHA256

    86ff6e676d7f9153f193fdcb967074ca5cb4a5cf41901088faba03e2765a552a

  • SHA512

    a40186015486fcca4dad5d614c808d9d2ca31c767d3330966760030fc8cd9e15194fb61c70344fe7f1cc8101128300df2db5ceff82624e8ee9731bed6730b9a5

  • SSDEEP

    24576:R7S8lBHSSIh+lfMZqX9OAE0ie0Kb2AL8kZ7:dSaB4+ZN55L8

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      86ff6e676d7f9153f193fdcb967074ca5cb4a5cf41901088faba03e2765a552a

    • Size

      1.1MB

    • MD5

      57050c15ea172306c5306829480bcfe7

    • SHA1

      0235890e55c39ab040613eed2e4457f3b058dad9

    • SHA256

      86ff6e676d7f9153f193fdcb967074ca5cb4a5cf41901088faba03e2765a552a

    • SHA512

      a40186015486fcca4dad5d614c808d9d2ca31c767d3330966760030fc8cd9e15194fb61c70344fe7f1cc8101128300df2db5ceff82624e8ee9731bed6730b9a5

    • SSDEEP

      24576:R7S8lBHSSIh+lfMZqX9OAE0ie0Kb2AL8kZ7:dSaB4+ZN55L8

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks