General

  • Target

    23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154.exe

  • Size

    48KB

  • Sample

    250122-wq1m3aykev

  • MD5

    89eb637d610c36c2245b0dcdb8073823

  • SHA1

    0f22e5bc5abbe5bee574fdcc420e529625e102f8

  • SHA256

    23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154

  • SHA512

    ff933611a6eef68d9522ca4d3e2cbbcbb90a9b108e4642eb0db190fa7214ddad1cd888cc13292a90b93b4e7a07bb47da873b4ab10a705c055dfd04321934e7b0

  • SSDEEP

    768:JesY0r63gjhJoK9QGPL4vzZq2o9W7GsxBbPru:osY0r6QroKKGCq2iW7za

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154.exe

    • Size

      48KB

    • MD5

      89eb637d610c36c2245b0dcdb8073823

    • SHA1

      0f22e5bc5abbe5bee574fdcc420e529625e102f8

    • SHA256

      23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154

    • SHA512

      ff933611a6eef68d9522ca4d3e2cbbcbb90a9b108e4642eb0db190fa7214ddad1cd888cc13292a90b93b4e7a07bb47da873b4ab10a705c055dfd04321934e7b0

    • SSDEEP

      768:JesY0r63gjhJoK9QGPL4vzZq2o9W7GsxBbPru:osY0r6QroKKGCq2iW7za

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks