bdaejec

General

Target

da1ce3e3ba5a7fca265daa5df3155537d094e747a36e658ecde93265d1bb0fb5.exe
Size

296KB
Sample

250217-e7nlds1jdv
MD5

58a8dfb8445a6d57c7488c5a7642dd09
SHA1

add33aa5aeb180e51379956913f43d036612e351
SHA256

da1ce3e3ba5a7fca265daa5df3155537d094e747a36e658ecde93265d1bb0fb5
SHA512

a026974191030952f9ee7f1eb1343b76bcfedd4385dfb5f605438c15884bc5e2692f4bfb2410308fc44028d1fb2c6d61a49d75ca2eb4aad3e2cb9601fe49deba
SSDEEP

6144:7MDcW16ZwIJssQ8Uy4UcYZVTc2rPzjJOHAOgxqqDLu2lt:7MDV1EEd+4UcUVTjPEHRqnu4

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  
  da1ce3e3ba5a7fca265daa5df3155537d094e747a36e658ecde93265d1bb0fb5.exe
- Size
  
  296KB
- MD5
  
  58a8dfb8445a6d57c7488c5a7642dd09
- SHA1
  
  add33aa5aeb180e51379956913f43d036612e351
- SHA256
  
  da1ce3e3ba5a7fca265daa5df3155537d094e747a36e658ecde93265d1bb0fb5
- SHA512
  
  a026974191030952f9ee7f1eb1343b76bcfedd4385dfb5f605438c15884bc5e2692f4bfb2410308fc44028d1fb2c6d61a49d75ca2eb4aad3e2cb9601fe49deba
- SSDEEP
  
  6144:7MDcW16ZwIJssQ8Uy4UcYZVTc2rPzjJOHAOgxqqDLu2lt:7MDV1EEd+4UcUVTjPEHRqnu4
Score

10^/10

bdaejec aspackv2 backdoor discovery
- Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Bdaejec family
  bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- Downloads MZ/PE file
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

System Network Configuration Discovery

1

T1016

Internet Connection Discovery

1

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Bdaejec family

Detects Bdaejec Backdoor.

Downloads MZ/PE file

ASPack v2.12-2.42

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2