General

  • Target

    335e4239c7b8891cf36c3ba9305d53a3d4381176e2e5244391a74090efdbab44N.exe

  • Size

    538KB

  • Sample

    250216-r586ja1kdv

  • MD5

    5ac28f0df6b68d5e86915c332e748030

  • SHA1

    99c85a3dd44202adad7c6986b76188629d844dfe

  • SHA256

    335e4239c7b8891cf36c3ba9305d53a3d4381176e2e5244391a74090efdbab44

  • SHA512

    8f5cb777e345d43817efeaa3f106fb97af86c738488de57ba63caf90d52223d4f2cf5f02771983e28b83d1c157d0de85aa89717f4efef39eda0d783beb8a5364

  • SSDEEP

    12288:xrMIztyCK5x8CBmn+RrNbEyWYa0Ie1vUxjV:HZyCA8CBmn+RrNj9ay5G

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      335e4239c7b8891cf36c3ba9305d53a3d4381176e2e5244391a74090efdbab44N.exe

    • Size

      538KB

    • MD5

      5ac28f0df6b68d5e86915c332e748030

    • SHA1

      99c85a3dd44202adad7c6986b76188629d844dfe

    • SHA256

      335e4239c7b8891cf36c3ba9305d53a3d4381176e2e5244391a74090efdbab44

    • SHA512

      8f5cb777e345d43817efeaa3f106fb97af86c738488de57ba63caf90d52223d4f2cf5f02771983e28b83d1c157d0de85aa89717f4efef39eda0d783beb8a5364

    • SSDEEP

      12288:xrMIztyCK5x8CBmn+RrNbEyWYa0Ie1vUxjV:HZyCA8CBmn+RrNj9ay5G

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • Downloads MZ/PE file

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks