General

  • Target

    b3ef8b8d3bf02da4f2d7338f3f0e53261376883e4a1f9dc97f79be7dd9d59535.exe

  • Size

    96KB

  • Sample

    250116-c44r4axmet

  • MD5

    e02b739deb3c2c69e74b0e162752be8b

  • SHA1

    6f6f6af5744013e40022665138c8f8b590f84aa9

  • SHA256

    b3ef8b8d3bf02da4f2d7338f3f0e53261376883e4a1f9dc97f79be7dd9d59535

  • SHA512

    e73ded6500e9b3395f9643da379a6186079dcd96654d7b5de0867a7daf5acd32cbf8b46e41262b5fb805fc7fd073462eef7eef8479ad5e73a867bcfc68ee601a

  • SSDEEP

    1536:MqPjvlpp/06w6Px9+3cu9V+gKf8GCq2iW7z+:MqPL1/7w6ZAs+VBKkGCHS

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      b3ef8b8d3bf02da4f2d7338f3f0e53261376883e4a1f9dc97f79be7dd9d59535.exe

    • Size

      96KB

    • MD5

      e02b739deb3c2c69e74b0e162752be8b

    • SHA1

      6f6f6af5744013e40022665138c8f8b590f84aa9

    • SHA256

      b3ef8b8d3bf02da4f2d7338f3f0e53261376883e4a1f9dc97f79be7dd9d59535

    • SHA512

      e73ded6500e9b3395f9643da379a6186079dcd96654d7b5de0867a7daf5acd32cbf8b46e41262b5fb805fc7fd073462eef7eef8479ad5e73a867bcfc68ee601a

    • SSDEEP

      1536:MqPjvlpp/06w6Px9+3cu9V+gKf8GCq2iW7z+:MqPL1/7w6ZAs+VBKkGCHS

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks