General

  • Target

    aeff60416fa6271e291300921a7ceb9f864f0b8c2aa84c167059040b054b4115

  • Size

    80KB

  • Sample

    250108-hcf5ls1jap

  • MD5

    8c3b864939b23e25801ec014d82dd16e

  • SHA1

    b46ae79f95f2ac185524dfa5c0e6f85a030145d0

  • SHA256

    aeff60416fa6271e291300921a7ceb9f864f0b8c2aa84c167059040b054b4115

  • SHA512

    e772396e8b09ddea1aa2cc57433d7920c5f281851ae752a2c80835ee5db40baeab124b8ccb26dfd21ec950f24327b06fe28ed9eefedf09a946d08543ed186036

  • SSDEEP

    1536:/JvJnBpwdaMIOOnToIfiV6pdQCOGCq2iW7z:/JvxKaCqTBfioopGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      aeff60416fa6271e291300921a7ceb9f864f0b8c2aa84c167059040b054b4115

    • Size

      80KB

    • MD5

      8c3b864939b23e25801ec014d82dd16e

    • SHA1

      b46ae79f95f2ac185524dfa5c0e6f85a030145d0

    • SHA256

      aeff60416fa6271e291300921a7ceb9f864f0b8c2aa84c167059040b054b4115

    • SHA512

      e772396e8b09ddea1aa2cc57433d7920c5f281851ae752a2c80835ee5db40baeab124b8ccb26dfd21ec950f24327b06fe28ed9eefedf09a946d08543ed186036

    • SSDEEP

      1536:/JvJnBpwdaMIOOnToIfiV6pdQCOGCq2iW7z:/JvxKaCqTBfioopGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks