Resubmissions

12-01-2025 08:27

250112-kcvn4svjhw 10

12-01-2025 08:16

250112-j59haswpel 10

General

  • Target

    d94dd6d211cb4d1256c8aac93812ac54e0447eeae5ffc3400d6e566f703e9bd6N.exe

  • Size

    296KB

  • Sample

    250112-j59haswpel

  • MD5

    9dc7cd1629a4b4db9b98a6252169a3f0

  • SHA1

    51d93267a098c1b3193082737fa007d3ea068795

  • SHA256

    d94dd6d211cb4d1256c8aac93812ac54e0447eeae5ffc3400d6e566f703e9bd6

  • SHA512

    5e3b06b6adec0549e5f62678e84ccb9390574b022a671936a6ab51caa5d47e2b8fef97abfc5f806c54092b810e3e19c0549e90ed8e6c15888dd272054762f38f

  • SSDEEP

    6144:7MDcW16ZwIJssQ8Uy4UcYZVTc2rPzjJOHAOgxqqDLu23:7MDV1EEd+4UcUVTjPEHRqnu

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      d94dd6d211cb4d1256c8aac93812ac54e0447eeae5ffc3400d6e566f703e9bd6N.exe

    • Size

      296KB

    • MD5

      9dc7cd1629a4b4db9b98a6252169a3f0

    • SHA1

      51d93267a098c1b3193082737fa007d3ea068795

    • SHA256

      d94dd6d211cb4d1256c8aac93812ac54e0447eeae5ffc3400d6e566f703e9bd6

    • SHA512

      5e3b06b6adec0549e5f62678e84ccb9390574b022a671936a6ab51caa5d47e2b8fef97abfc5f806c54092b810e3e19c0549e90ed8e6c15888dd272054762f38f

    • SSDEEP

      6144:7MDcW16ZwIJssQ8Uy4UcYZVTc2rPzjJOHAOgxqqDLu23:7MDV1EEd+4UcUVTjPEHRqnu

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks