General

  • Target

    7e202243c455e6977db7b4d8a89fe1eadba96e9f928cb91ea714388395be8940.exe

  • Size

    979KB

  • Sample

    250124-tbee6sxmfr

  • MD5

    a73b06096f3ce453bd1db50aa7984252

  • SHA1

    163d74fe372f5b461a7c3a6be944ad361705cb29

  • SHA256

    7e202243c455e6977db7b4d8a89fe1eadba96e9f928cb91ea714388395be8940

  • SHA512

    356ca9e544e531fb32757a3303e220bd02bda10772ca3aaf21e66e06482aaa3d873e6ec1c0b421cc5d5c67949aaebc356ceb1d7cbcbce76ab4af3f587f98b52f

  • SSDEEP

    24576:ifWGNhIFH7VwIN3AryDBxHNz8gw6heyIcsuUolciSFme4X/Td4T/tw:aSVK7EFwihrIcsuUoxX/TE/W

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      7e202243c455e6977db7b4d8a89fe1eadba96e9f928cb91ea714388395be8940.exe

    • Size

      979KB

    • MD5

      a73b06096f3ce453bd1db50aa7984252

    • SHA1

      163d74fe372f5b461a7c3a6be944ad361705cb29

    • SHA256

      7e202243c455e6977db7b4d8a89fe1eadba96e9f928cb91ea714388395be8940

    • SHA512

      356ca9e544e531fb32757a3303e220bd02bda10772ca3aaf21e66e06482aaa3d873e6ec1c0b421cc5d5c67949aaebc356ceb1d7cbcbce76ab4af3f587f98b52f

    • SSDEEP

      24576:ifWGNhIFH7VwIN3AryDBxHNz8gw6heyIcsuUolciSFme4X/Td4T/tw:aSVK7EFwihrIcsuUoxX/TE/W

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks