General

  • Target

    10a3e16d5cdae7195ff7a1247d5fac2fd360bbf44c408ab873b7840cb823dfd2N.exe

  • Size

    78KB

  • Sample

    250216-ljj2ma1pcj

  • MD5

    67c78cf140f95eccfdb81091154bc960

  • SHA1

    d84580a85091edbc2cd2ab08ede66a996a07e84c

  • SHA256

    10a3e16d5cdae7195ff7a1247d5fac2fd360bbf44c408ab873b7840cb823dfd2

  • SHA512

    ed1a52952e7fa2ffa58c4a9e4e7879fc609dee721ec866d5da142e30ec4ff7e389d2eb4aacbda6a3e04c93fd6630cd3a9f0ffc6779efb4894679204010d6a87d

  • SSDEEP

    768:Uwckfpik6qYXy7dMkIwzsWUHUpOCdoR+vMiHfdOa5IQGPL4vzZq2o9W7GsxBbPr:xFfh7dGs3wqOCSR6Mesa5DGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      10a3e16d5cdae7195ff7a1247d5fac2fd360bbf44c408ab873b7840cb823dfd2N.exe

    • Size

      78KB

    • MD5

      67c78cf140f95eccfdb81091154bc960

    • SHA1

      d84580a85091edbc2cd2ab08ede66a996a07e84c

    • SHA256

      10a3e16d5cdae7195ff7a1247d5fac2fd360bbf44c408ab873b7840cb823dfd2

    • SHA512

      ed1a52952e7fa2ffa58c4a9e4e7879fc609dee721ec866d5da142e30ec4ff7e389d2eb4aacbda6a3e04c93fd6630cd3a9f0ffc6779efb4894679204010d6a87d

    • SSDEEP

      768:Uwckfpik6qYXy7dMkIwzsWUHUpOCdoR+vMiHfdOa5IQGPL4vzZq2o9W7GsxBbPr:xFfh7dGs3wqOCSR6Mesa5DGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • Downloads MZ/PE file

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks