General

  • Target

    de4ee4290ec899096746faef1c6a67693648d1a2636a05a94ef1198153667a37N.exe

  • Size

    31KB

  • Sample

    250204-vy912atpbs

  • MD5

    28b6bc26274bdf8a8910159c2d645430

  • SHA1

    e2957c9fb49315876696d5a83b672706347c7201

  • SHA256

    de4ee4290ec899096746faef1c6a67693648d1a2636a05a94ef1198153667a37

  • SHA512

    f6e866458c8b674eb8cf266548942102b5056f1467f5ce0021e071130985f98361a18e8ccb95eddc715ddca3fa3289c4226628627b63a8826baa0ab835c8742c

  • SSDEEP

    768:uWQ3655Kv1X/qY1MSd6vQGPL4vzZq2o9W7GsxBbPr:uHqaNrFd6oGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      de4ee4290ec899096746faef1c6a67693648d1a2636a05a94ef1198153667a37N.exe

    • Size

      31KB

    • MD5

      28b6bc26274bdf8a8910159c2d645430

    • SHA1

      e2957c9fb49315876696d5a83b672706347c7201

    • SHA256

      de4ee4290ec899096746faef1c6a67693648d1a2636a05a94ef1198153667a37

    • SHA512

      f6e866458c8b674eb8cf266548942102b5056f1467f5ce0021e071130985f98361a18e8ccb95eddc715ddca3fa3289c4226628627b63a8826baa0ab835c8742c

    • SSDEEP

      768:uWQ3655Kv1X/qY1MSd6vQGPL4vzZq2o9W7GsxBbPr:uHqaNrFd6oGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks