General

  • Target

    137fde2bb3da136cf0886186a666b14312ab5dfa6e3b2282cd1c2d973f34dba8.zip

  • Size

    109KB

  • Sample

    250210-s1vm1swlhp

  • MD5

    6ed1823fdca5255b8b9030e81e3619c0

  • SHA1

    b7b9f2eb3c89f1062480dbaaf8134e240f1df9cf

  • SHA256

    87d35610a7a791ef5e22c846215680b4557f5a225967d7ac7a6c8571dc6332fd

  • SHA512

    8b457d18438601b770d19901e6ddb8628b703960632de62e9d60f058f941d24e3a68f7ede7e71676f4334e756917d59a4aa6a6cb4141cdf8df056e0b5cb158e0

  • SSDEEP

    3072:tQ4HV8hKdp4JCn18zy2OUS5so6etedqQs:2UV8hKdiJCn18e2h/s

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      137fde2bb3da136cf0886186a666b14312ab5dfa6e3b2282cd1c2d973f34dba8.exe

    • Size

      128KB

    • MD5

      ada94052788e9bd57b4c1c35627f02e8

    • SHA1

      46fe848e41b11f832cf6377b760ef391af8963c0

    • SHA256

      137fde2bb3da136cf0886186a666b14312ab5dfa6e3b2282cd1c2d973f34dba8

    • SHA512

      106cff565aea313598a00008cba0691702508f900981f8481936e6d2c305dfc4a8cd7cd56ab0a4793a4eeba79c5f1a1acaa43523e14590411da3a8b05d594cf2

    • SSDEEP

      3072:1RXjDBVX92/j27T88Qq9BPNRRDXCuidiGCH:1VjDXYSnX9NvsN

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks