General

  • Target

    7e08e8a44f619d76a2c262dbca8d1e321d8625b9b99ff66dc6ecfa6349a743d7

  • Size

    36KB

  • Sample

    250107-evj3fawkbp

  • MD5

    46682587a5b48ae81082827f18b7570b

  • SHA1

    2c8a4f3bedd89d4bd055e3e997c6fa59a6397eef

  • SHA256

    7e08e8a44f619d76a2c262dbca8d1e321d8625b9b99ff66dc6ecfa6349a743d7

  • SHA512

    533d11d1fe1b6ae2f1bc6694f004feb452fe316aa3cb1768aa0cddbeac83b8ef323dd680ab38553a934d82b2cf8e19f40b8518ba8858991c2706860931eafabe

  • SSDEEP

    768:aA+m41HKUpOv068E4Mf4MMRt4MtV2n5b6QGPL4vzZq2o9W7GsxBbPr:aA+m6qqOcVEP87T2n5b5GCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      7e08e8a44f619d76a2c262dbca8d1e321d8625b9b99ff66dc6ecfa6349a743d7

    • Size

      36KB

    • MD5

      46682587a5b48ae81082827f18b7570b

    • SHA1

      2c8a4f3bedd89d4bd055e3e997c6fa59a6397eef

    • SHA256

      7e08e8a44f619d76a2c262dbca8d1e321d8625b9b99ff66dc6ecfa6349a743d7

    • SHA512

      533d11d1fe1b6ae2f1bc6694f004feb452fe316aa3cb1768aa0cddbeac83b8ef323dd680ab38553a934d82b2cf8e19f40b8518ba8858991c2706860931eafabe

    • SSDEEP

      768:aA+m41HKUpOv068E4Mf4MMRt4MtV2n5b6QGPL4vzZq2o9W7GsxBbPr:aA+m6qqOcVEP87T2n5b5GCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks