General

  • Target

    0111e81fe3c0a53071fbd5be5efcf26ff06207b398b0b2a7b5a4a74c24b8442f.exe

  • Size

    64KB

  • Sample

    250113-enf27sxndm

  • MD5

    1e45cce61f2c6eea0f6155bfc6de4e30

  • SHA1

    d840b0d1a839aedd38eb7c0bf5a05a035b576da5

  • SHA256

    0111e81fe3c0a53071fbd5be5efcf26ff06207b398b0b2a7b5a4a74c24b8442f

  • SHA512

    1c340791cdd564b8b561df195beaf97188719a2667e8336e8e606102a014717729dfeafaa1ed7edcbd634c38993d7bc0fee57f85f2def3cc51d182828f9e82f6

  • SSDEEP

    768:YgoxKForThXdJjuvEwrlhpwx6E4eKAK7rEeQGPL4vzZq2o9W7GsxBbPre:BlFopNJSvu6E475UlGCq2iW7zK

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      0111e81fe3c0a53071fbd5be5efcf26ff06207b398b0b2a7b5a4a74c24b8442f.exe

    • Size

      64KB

    • MD5

      1e45cce61f2c6eea0f6155bfc6de4e30

    • SHA1

      d840b0d1a839aedd38eb7c0bf5a05a035b576da5

    • SHA256

      0111e81fe3c0a53071fbd5be5efcf26ff06207b398b0b2a7b5a4a74c24b8442f

    • SHA512

      1c340791cdd564b8b561df195beaf97188719a2667e8336e8e606102a014717729dfeafaa1ed7edcbd634c38993d7bc0fee57f85f2def3cc51d182828f9e82f6

    • SSDEEP

      768:YgoxKForThXdJjuvEwrlhpwx6E4eKAK7rEeQGPL4vzZq2o9W7GsxBbPre:BlFopNJSvu6E475UlGCq2iW7zK

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks