General

  • Target

    c08f9062592ffe83ffd259e6701748f9b2cd735cdff079c2a6231402cf4ea0e2

  • Size

    1.7MB

  • Sample

    250211-lsf2bssnek

  • MD5

    f6ff1a3c10c0ea4619aedaa9863f8922

  • SHA1

    16d4a85de3e561273e91496d166f1512bc15dddd

  • SHA256

    c08f9062592ffe83ffd259e6701748f9b2cd735cdff079c2a6231402cf4ea0e2

  • SHA512

    5b8ac5b939f4892bc51d0e9556dee1faeb50d3b9dbd94d5f61760e670ca78de294b673edbcf78870eeba2593280a29a1f26ccd4e68de895743a99eedf5497dad

  • SSDEEP

    24576:Ckj+rIlGHibOR0UM7y8r1kJIhqEI8+2HCEToyD4Echprrm0lwE13/TQcKbWh:CkqrfiLBjE98T74EcajK/T/KbW

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      c08f9062592ffe83ffd259e6701748f9b2cd735cdff079c2a6231402cf4ea0e2

    • Size

      1.7MB

    • MD5

      f6ff1a3c10c0ea4619aedaa9863f8922

    • SHA1

      16d4a85de3e561273e91496d166f1512bc15dddd

    • SHA256

      c08f9062592ffe83ffd259e6701748f9b2cd735cdff079c2a6231402cf4ea0e2

    • SHA512

      5b8ac5b939f4892bc51d0e9556dee1faeb50d3b9dbd94d5f61760e670ca78de294b673edbcf78870eeba2593280a29a1f26ccd4e68de895743a99eedf5497dad

    • SSDEEP

      24576:Ckj+rIlGHibOR0UM7y8r1kJIhqEI8+2HCEToyD4Echprrm0lwE13/TQcKbWh:CkqrfiLBjE98T74EcajK/T/KbW

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks