bdaejec

General

Target

2025-01-14_8606d64028687935525479dde1eedd2a_smoke-loader_wapomi
Size

728KB
Sample

250114-rbkk3ssjdk
MD5

8606d64028687935525479dde1eedd2a
SHA1

5fadd45930735a3f49b814098cec0e7837a23729
SHA256

2bdb279e4d7eca9013d444a5337e8ef30794576b105e448287a9462d0c16c232
SHA512

c694f4824f47d3a29664d2722d4a88257be7ccac9bb6c8f339176d342457ad0f06014ed254db4b22e77063ff7a9553e92160780d16381a64e1feebf7f77bf94a
SSDEEP

12288:AU+9H3900EJqrekLEyTYQcDL/TNuUCziP6VFGO5lrEaKYNtcBvAuvlee2NCFbLkV:AU+9XNrenyktDLdYNtcdvQNC9wHAP5cF

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  
  2025-01-14_8606d64028687935525479dde1eedd2a_smoke-loader_wapomi
- Size
  
  728KB
- MD5
  
  8606d64028687935525479dde1eedd2a
- SHA1
  
  5fadd45930735a3f49b814098cec0e7837a23729
- SHA256
  
  2bdb279e4d7eca9013d444a5337e8ef30794576b105e448287a9462d0c16c232
- SHA512
  
  c694f4824f47d3a29664d2722d4a88257be7ccac9bb6c8f339176d342457ad0f06014ed254db4b22e77063ff7a9553e92160780d16381a64e1feebf7f77bf94a
- SSDEEP
  
  12288:AU+9H3900EJqrekLEyTYQcDL/TNuUCziP6VFGO5lrEaKYNtcBvAuvlee2NCFbLkV:AU+9XNrenyktDLdYNtcdvQNC9wHAP5cF
Score

10^/10

bdaejec aspackv2 backdoor discovery
- Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Bdaejec family
  bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Bdaejec family

Detects Bdaejec Backdoor.

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

We care about your privacy.