General

  • Target

    425abf9da5da520af6251d039bcd682d05540ee733be1fb03e5ea77fa894f7fa.exe

  • Size

    31KB

  • Sample

    250204-y3c4msskgm

  • MD5

    3c9a7cd527f3fa60ce78a30be03c8d2a

  • SHA1

    4e73667a965760b20e23f85479ed1e254342babe

  • SHA256

    425abf9da5da520af6251d039bcd682d05540ee733be1fb03e5ea77fa894f7fa

  • SHA512

    252961a9bf79349b9786ac26fd5fe5dd89778372248ff3119b43b4278799304d9fe445f7fea771c38141626a36e83da6bc28f0a1c0848dad2664b821ad50f2ee

  • SSDEEP

    768:uWQ3655Kv1X/qY1MSd6vQGPL4vzZq2o9W7GsxBbPrq:uHqaNrFd6oGCq2iW7zu

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      425abf9da5da520af6251d039bcd682d05540ee733be1fb03e5ea77fa894f7fa.exe

    • Size

      31KB

    • MD5

      3c9a7cd527f3fa60ce78a30be03c8d2a

    • SHA1

      4e73667a965760b20e23f85479ed1e254342babe

    • SHA256

      425abf9da5da520af6251d039bcd682d05540ee733be1fb03e5ea77fa894f7fa

    • SHA512

      252961a9bf79349b9786ac26fd5fe5dd89778372248ff3119b43b4278799304d9fe445f7fea771c38141626a36e83da6bc28f0a1c0848dad2664b821ad50f2ee

    • SSDEEP

      768:uWQ3655Kv1X/qY1MSd6vQGPL4vzZq2o9W7GsxBbPrq:uHqaNrFd6oGCq2iW7zu

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks