General

  • Target

    eded002f7cb6a0735d4680c3f86a491c5a3f4b91920a3846e1fee88c2c8863f2N.exe

  • Size

    45KB

  • Sample

    250205-qjjs3szjcn

  • MD5

    f77eade8e037a9aa137b7c35b4640da0

  • SHA1

    1bb8cf50d814682890d5d0f6cb286512f12cda45

  • SHA256

    eded002f7cb6a0735d4680c3f86a491c5a3f4b91920a3846e1fee88c2c8863f2

  • SHA512

    4934732c6f9f248f620ccdbf32cebc00bd5f59fbb4d3349c4cd221153a0160bdd75f3b359c5b04e559812be7a15701106cf72e816210b66cdff8085dfa30b236

  • SSDEEP

    768:X7Z2VKKlnDRMyL+TDx8VlF67RvsypS6HkPA0d/1oQGPL4vzZq2o9W7GsxBbPr:V27bMyL6tMlA7R0ypSU0Z1jGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      eded002f7cb6a0735d4680c3f86a491c5a3f4b91920a3846e1fee88c2c8863f2N.exe

    • Size

      45KB

    • MD5

      f77eade8e037a9aa137b7c35b4640da0

    • SHA1

      1bb8cf50d814682890d5d0f6cb286512f12cda45

    • SHA256

      eded002f7cb6a0735d4680c3f86a491c5a3f4b91920a3846e1fee88c2c8863f2

    • SHA512

      4934732c6f9f248f620ccdbf32cebc00bd5f59fbb4d3349c4cd221153a0160bdd75f3b359c5b04e559812be7a15701106cf72e816210b66cdff8085dfa30b236

    • SSDEEP

      768:X7Z2VKKlnDRMyL+TDx8VlF67RvsypS6HkPA0d/1oQGPL4vzZq2o9W7GsxBbPr:V27bMyL6tMlA7R0ypSU0Z1jGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks