General

  • Target

    61b92747b81b1153443a50a62b68dc151ef49e0ca8efef0fd0dcd928f65f79dcN.exe

  • Size

    48KB

  • Sample

    250121-1rq78stjhr

  • MD5

    98dd1e68298c04be3992e0d5642f8570

  • SHA1

    94f3916805e7f8bdde69df64e98833e6fae32151

  • SHA256

    61b92747b81b1153443a50a62b68dc151ef49e0ca8efef0fd0dcd928f65f79dc

  • SHA512

    6c90899cb89979bb9c48a9d632251abdb605ee5b592993f2e0d85aff5ce32bf713e38b76a3af8352f40dd7d20be7bacb74217aba526fda6f8882cb1e3e5532c9

  • SSDEEP

    768:JesY0r63gjhJoK9QGPL4vzZq2o9W7GsxBbPr:osY0r6QroKKGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      61b92747b81b1153443a50a62b68dc151ef49e0ca8efef0fd0dcd928f65f79dcN.exe

    • Size

      48KB

    • MD5

      98dd1e68298c04be3992e0d5642f8570

    • SHA1

      94f3916805e7f8bdde69df64e98833e6fae32151

    • SHA256

      61b92747b81b1153443a50a62b68dc151ef49e0ca8efef0fd0dcd928f65f79dc

    • SHA512

      6c90899cb89979bb9c48a9d632251abdb605ee5b592993f2e0d85aff5ce32bf713e38b76a3af8352f40dd7d20be7bacb74217aba526fda6f8882cb1e3e5532c9

    • SSDEEP

      768:JesY0r63gjhJoK9QGPL4vzZq2o9W7GsxBbPr:osY0r6QroKKGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks