General

  • Target

    3c8cf210574c3d47bfb18abc3480c8898b30e73ed25cd86ff169c149a4ed321cN.exe

  • Size

    1.1MB

  • Sample

    250116-2ecprasqeq

  • MD5

    b031cc73360b1c18bb8e5ac6a699ac90

  • SHA1

    3df5e6d38a59b338107f07ff882c0cf65d774d15

  • SHA256

    3c8cf210574c3d47bfb18abc3480c8898b30e73ed25cd86ff169c149a4ed321c

  • SHA512

    87a9f82c2ca2f1914dd6e1b17f27296bd25516d63f8402bb8ab93c377bdace0d030a95dffb8050c34022a3ae95446ade65a6afb4f9ed2160cdec5f523675110c

  • SSDEEP

    12288:ZqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+:ZnajQEPnvg6PhWDC750

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      3c8cf210574c3d47bfb18abc3480c8898b30e73ed25cd86ff169c149a4ed321cN.exe

    • Size

      1.1MB

    • MD5

      b031cc73360b1c18bb8e5ac6a699ac90

    • SHA1

      3df5e6d38a59b338107f07ff882c0cf65d774d15

    • SHA256

      3c8cf210574c3d47bfb18abc3480c8898b30e73ed25cd86ff169c149a4ed321c

    • SHA512

      87a9f82c2ca2f1914dd6e1b17f27296bd25516d63f8402bb8ab93c377bdace0d030a95dffb8050c34022a3ae95446ade65a6afb4f9ed2160cdec5f523675110c

    • SSDEEP

      12288:ZqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+:ZnajQEPnvg6PhWDC750

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks