General

  • Target

    97b1256771b7685dcb264ed1797272f6d22ded1c876f25b57f1983626a269749

  • Size

    80KB

  • Sample

    250108-flf5vsvna1

  • MD5

    cd8c507ee0b2c50fec1b243a74817017

  • SHA1

    6a8626380b5fc561b7d22f55e93a7523fb8b9a71

  • SHA256

    97b1256771b7685dcb264ed1797272f6d22ded1c876f25b57f1983626a269749

  • SHA512

    e6f84f376d285c5c8ba6c6e623e58d7ed4d9f4bbf833e050b9dee59910c863bfeef0bc0c9f3e351ed4737038cedbe774a9e98483f30a02856186058f5b3e1640

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQ3BGCq2iW7z:Hk3U8kTQRGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      97b1256771b7685dcb264ed1797272f6d22ded1c876f25b57f1983626a269749

    • Size

      80KB

    • MD5

      cd8c507ee0b2c50fec1b243a74817017

    • SHA1

      6a8626380b5fc561b7d22f55e93a7523fb8b9a71

    • SHA256

      97b1256771b7685dcb264ed1797272f6d22ded1c876f25b57f1983626a269749

    • SHA512

      e6f84f376d285c5c8ba6c6e623e58d7ed4d9f4bbf833e050b9dee59910c863bfeef0bc0c9f3e351ed4737038cedbe774a9e98483f30a02856186058f5b3e1640

    • SSDEEP

      1536:Yg/6/tM8NXDjPX0QWlfGMckTQ3BGCq2iW7z:Hk3U8kTQRGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks