General

  • Target

    de7a6388f4b16c9574951dbc079cf4e60154dfc28caab53f9eae3e3ec009c2c5.exe

  • Size

    96KB

  • Sample

    250117-sjzkmssrc1

  • MD5

    09e3b705008c2006689fd2b01cea1ed9

  • SHA1

    5312ee8343040ddfe490fefaef7f26d60ba23123

  • SHA256

    de7a6388f4b16c9574951dbc079cf4e60154dfc28caab53f9eae3e3ec009c2c5

  • SHA512

    35e6ab394f3ff93a9e445fdd8b96c9527ae6523fd23c865738e0dcd9ee363558c92205cf4ea8b736c3d0893588469699a3b763fab3f8ae0be5b4ea0805bd49d7

  • SSDEEP

    1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK11oGCq2iW7ze:pJLrp0cQ7QAINqPDHQncVGCHy

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      de7a6388f4b16c9574951dbc079cf4e60154dfc28caab53f9eae3e3ec009c2c5.exe

    • Size

      96KB

    • MD5

      09e3b705008c2006689fd2b01cea1ed9

    • SHA1

      5312ee8343040ddfe490fefaef7f26d60ba23123

    • SHA256

      de7a6388f4b16c9574951dbc079cf4e60154dfc28caab53f9eae3e3ec009c2c5

    • SHA512

      35e6ab394f3ff93a9e445fdd8b96c9527ae6523fd23c865738e0dcd9ee363558c92205cf4ea8b736c3d0893588469699a3b763fab3f8ae0be5b4ea0805bd49d7

    • SSDEEP

      1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK11oGCq2iW7ze:pJLrp0cQ7QAINqPDHQncVGCHy

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks