General

  • Target

    3e7c52e531e66542cd03f7d7fea8320eed74b56072558f307cf558ff19cebc9d.exe

  • Size

    80KB

  • Sample

    250124-cbq1javrcl

  • MD5

    a9d7e97c855ae0dea86b3a507bb6cda4

  • SHA1

    47a38a325937b477ad4153fe01979f51e62db286

  • SHA256

    3e7c52e531e66542cd03f7d7fea8320eed74b56072558f307cf558ff19cebc9d

  • SHA512

    b3ed2ba206161e72ebf69ef4ee7b290a66f478116babdd21e5e78e7eb6e9ed4c95d613ec972bd4cad3bdc26b7e72213a3654a900f4754b971db8bfe6fdc4db0c

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQBqGCq2iW7zq:Y3ysTGhQMGCHm

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      3e7c52e531e66542cd03f7d7fea8320eed74b56072558f307cf558ff19cebc9d.exe

    • Size

      80KB

    • MD5

      a9d7e97c855ae0dea86b3a507bb6cda4

    • SHA1

      47a38a325937b477ad4153fe01979f51e62db286

    • SHA256

      3e7c52e531e66542cd03f7d7fea8320eed74b56072558f307cf558ff19cebc9d

    • SHA512

      b3ed2ba206161e72ebf69ef4ee7b290a66f478116babdd21e5e78e7eb6e9ed4c95d613ec972bd4cad3bdc26b7e72213a3654a900f4754b971db8bfe6fdc4db0c

    • SSDEEP

      1536:RfnLq01weW5yX3jFxv49Nu4GhQBqGCq2iW7zq:Y3ysTGhQMGCHm

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks