General

  • Target

    6f57f33b49a8bd0632f14db272e93cce739bb36a2cc4ad8ac509cb8d28daf016

  • Size

    84KB

  • Sample

    250117-cr2rzaynft

  • MD5

    1b74e11ceb7c13eafe14cbb4e821278c

  • SHA1

    9f78df54d7b820d40e2c198f783afc717f74debb

  • SHA256

    6f57f33b49a8bd0632f14db272e93cce739bb36a2cc4ad8ac509cb8d28daf016

  • SHA512

    59a504893439ac4cee61cc0658ae2806ac7ee23ce8acb14a682cd66b931d3c13696ddaf7e9bbded45f3548ab522c2048763558996b66ea087a7f31febe526172

  • SSDEEP

    768:t03sqBPUD/WHiR9+z1v+1vhdkY7mCDN5zzANhHcz5WgQGPL4vzZq2o9W7GsxBbPr:vNDp+z121jV54sz5WrGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      6f57f33b49a8bd0632f14db272e93cce739bb36a2cc4ad8ac509cb8d28daf016

    • Size

      84KB

    • MD5

      1b74e11ceb7c13eafe14cbb4e821278c

    • SHA1

      9f78df54d7b820d40e2c198f783afc717f74debb

    • SHA256

      6f57f33b49a8bd0632f14db272e93cce739bb36a2cc4ad8ac509cb8d28daf016

    • SHA512

      59a504893439ac4cee61cc0658ae2806ac7ee23ce8acb14a682cd66b931d3c13696ddaf7e9bbded45f3548ab522c2048763558996b66ea087a7f31febe526172

    • SSDEEP

      768:t03sqBPUD/WHiR9+z1v+1vhdkY7mCDN5zzANhHcz5WgQGPL4vzZq2o9W7GsxBbPr:vNDp+z121jV54sz5WrGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks