bdaejec

General

Target

2025-02-01_81b09f869abfbe97b335cf30bfab35c4_smoke-loader_wapomi
Size

3.2MB
Sample

250201-3cqdhavmh1
MD5

81b09f869abfbe97b335cf30bfab35c4
SHA1

5c25b6f6b8f6d95256634f42b1182d740ab9ea69
SHA256

f1513638f27dbef989b971e747181c330b52535a90f0dff671140fe92d9a051d
SHA512

d63e5505c1e104e1ef9d7d67cb6f3577f60e03d6aadd5a4c2dbcdd8cd24e12664d8d784cbb992085118092860310d7d6648dfae5b919b3266a3031b1491772eb
SSDEEP

24576:x7X9ZnkBaAowFmVOjICqdeTSotoA010F/FYtDcLzWsV6qLEs2CHzZcteCrQP1eI:9TnkXoymVerOtovrmsdCv+

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  
  2025-02-01_81b09f869abfbe97b335cf30bfab35c4_smoke-loader_wapomi
- Size
  
  3.2MB
- MD5
  
  81b09f869abfbe97b335cf30bfab35c4
- SHA1
  
  5c25b6f6b8f6d95256634f42b1182d740ab9ea69
- SHA256
  
  f1513638f27dbef989b971e747181c330b52535a90f0dff671140fe92d9a051d
- SHA512
  
  d63e5505c1e104e1ef9d7d67cb6f3577f60e03d6aadd5a4c2dbcdd8cd24e12664d8d784cbb992085118092860310d7d6648dfae5b919b3266a3031b1491772eb
- SSDEEP
  
  24576:x7X9ZnkBaAowFmVOjICqdeTSotoA010F/FYtDcLzWsV6qLEs2CHzZcteCrQP1eI:9TnkXoymVerOtovrmsdCv+
Score

10^/10

bdaejec aspackv2 backdoor discovery
- Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Bdaejec family
  bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Bdaejec family

Detects Bdaejec Backdoor.

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2