General

  • Target

    a58fe81aa10628b6f776015ce323d697ff7df887e04a54d42d61fe496f07a283

  • Size

    28KB

  • Sample

    250203-dj3vqsxphv

  • MD5

    e4ac95edac2f200de68ff07156a9aa96

  • SHA1

    17e18a2f208464e303f4af2f1b6b0f3f0311abd9

  • SHA256

    a58fe81aa10628b6f776015ce323d697ff7df887e04a54d42d61fe496f07a283

  • SHA512

    c604109e5d1cf48946773915bf0ded2b0dc519e71150cc777d90e061aa2c6348fd25b86360358378ff85b51fcb893af57e4efb51027ecc8fe20e9334b77cbfc8

  • SSDEEP

    384:51G/0strh1ieR5SSlXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:C/0cLi8xbQGPL4vzZq2o9W7GsxBbPr

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      a58fe81aa10628b6f776015ce323d697ff7df887e04a54d42d61fe496f07a283

    • Size

      28KB

    • MD5

      e4ac95edac2f200de68ff07156a9aa96

    • SHA1

      17e18a2f208464e303f4af2f1b6b0f3f0311abd9

    • SHA256

      a58fe81aa10628b6f776015ce323d697ff7df887e04a54d42d61fe496f07a283

    • SHA512

      c604109e5d1cf48946773915bf0ded2b0dc519e71150cc777d90e061aa2c6348fd25b86360358378ff85b51fcb893af57e4efb51027ecc8fe20e9334b77cbfc8

    • SSDEEP

      384:51G/0strh1ieR5SSlXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:C/0cLi8xbQGPL4vzZq2o9W7GsxBbPr

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks