General

  • Target

    bfa2f162df38f24ab650339122304b46eab27c81ef66e7d9585fcae6f82d7cb8

  • Size

    6.7MB

  • Sample

    250124-xggdhatqcj

  • MD5

    f03b14e62c74d3b050140ff9a7015f13

  • SHA1

    7aa17bf3b1ae7327a63c80f77d265bbfd2a2e578

  • SHA256

    bfa2f162df38f24ab650339122304b46eab27c81ef66e7d9585fcae6f82d7cb8

  • SHA512

    c06bcc4f0a113d44580d71308503795d53ccdb93d86c99fde6432706f95a737dd3b0931a835cb6c5c99257d7457373f3db22cc549dc9b84876094f22ca96a600

  • SSDEEP

    98304:5kaWsAYtVm8xoZV/Cypkj2JY7kXeYfmFao4PWjJ8MjY0:5kaWsAYbZawypka4lYbMJ8MjY0

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      bfa2f162df38f24ab650339122304b46eab27c81ef66e7d9585fcae6f82d7cb8

    • Size

      6.7MB

    • MD5

      f03b14e62c74d3b050140ff9a7015f13

    • SHA1

      7aa17bf3b1ae7327a63c80f77d265bbfd2a2e578

    • SHA256

      bfa2f162df38f24ab650339122304b46eab27c81ef66e7d9585fcae6f82d7cb8

    • SHA512

      c06bcc4f0a113d44580d71308503795d53ccdb93d86c99fde6432706f95a737dd3b0931a835cb6c5c99257d7457373f3db22cc549dc9b84876094f22ca96a600

    • SSDEEP

      98304:5kaWsAYtVm8xoZV/Cypkj2JY7kXeYfmFao4PWjJ8MjY0:5kaWsAYbZawypka4lYbMJ8MjY0

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks