bdaejec

General

Target

2025-01-09_d58d832a43e2b557a92b172c775163c0_smoke-loader_wapomi
Size

1.2MB
Sample

250109-ztv4ja1lcy
MD5

d58d832a43e2b557a92b172c775163c0
SHA1

6332c470428ac4fbac0486565722ff1bfb1bba47
SHA256

acd29339eacdd42b913e64078123622af683e34958b37f56c024460e4d13762c
SHA512

9570136c64785a4c525b3f073957f405560278d94508bb3f2d62462bf0505da835de7f5dbd9539457f5888d310d68ec6ed36426d34688ff6b8878ddc0b940d51
SSDEEP

24576:d7GO7dtrjrICw9XuXo7beSTdt5xbX01uvfTXfBxr93d5E/jKQvVj4YpdjYY0td78:8EtnrICSooGSTD5xbX012fjBxr93

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  
  2025-01-09_d58d832a43e2b557a92b172c775163c0_smoke-loader_wapomi
- Size
  
  1.2MB
- MD5
  
  d58d832a43e2b557a92b172c775163c0
- SHA1
  
  6332c470428ac4fbac0486565722ff1bfb1bba47
- SHA256
  
  acd29339eacdd42b913e64078123622af683e34958b37f56c024460e4d13762c
- SHA512
  
  9570136c64785a4c525b3f073957f405560278d94508bb3f2d62462bf0505da835de7f5dbd9539457f5888d310d68ec6ed36426d34688ff6b8878ddc0b940d51
- SSDEEP
  
  24576:d7GO7dtrjrICw9XuXo7beSTdt5xbX01uvfTXfBxr93d5E/jKQvVj4YpdjYY0td78:8EtnrICSooGSTD5xbX012fjBxr93
Score

10^/10

bdaejec aspackv2 backdoor discovery
- Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Bdaejec family
  bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Bdaejec family

Detects Bdaejec Backdoor.

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2