General

  • Target

    bdc39bd177902f25904a6438c353c34f5b34d06d2a6796e80bc9d173cf1b52d1N.exe

  • Size

    96KB

  • Sample

    250117-g873jawkhk

  • MD5

    ce104d074340dd089df7027b04edac00

  • SHA1

    3df55cb6c62d0bd17264ed780da355c270b7fe21

  • SHA256

    bdc39bd177902f25904a6438c353c34f5b34d06d2a6796e80bc9d173cf1b52d1

  • SHA512

    cfe1c7643d7ebabda241286e334ae4a8ccea3e23c46f02dae6f23c4b518a652971a569bf77ebb95e88fc00d7871f0f205274eadb1bb93a14df5e91499f6375a7

  • SSDEEP

    1536:MqPjvlpp/06w6Px9+3cu9V+gKf8GCq2iW7z:MqPL1/7w6ZAs+VBKkGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      bdc39bd177902f25904a6438c353c34f5b34d06d2a6796e80bc9d173cf1b52d1N.exe

    • Size

      96KB

    • MD5

      ce104d074340dd089df7027b04edac00

    • SHA1

      3df55cb6c62d0bd17264ed780da355c270b7fe21

    • SHA256

      bdc39bd177902f25904a6438c353c34f5b34d06d2a6796e80bc9d173cf1b52d1

    • SHA512

      cfe1c7643d7ebabda241286e334ae4a8ccea3e23c46f02dae6f23c4b518a652971a569bf77ebb95e88fc00d7871f0f205274eadb1bb93a14df5e91499f6375a7

    • SSDEEP

      1536:MqPjvlpp/06w6Px9+3cu9V+gKf8GCq2iW7z:MqPL1/7w6ZAs+VBKkGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks