bdaejec

General

Target

2025-03-21_b32a55d7d1bf2bd5b3ea9b0cbaf975cf_smoke-loader_wapomi
Size

36KB
Sample

250321-r4hxysvms8
MD5

b32a55d7d1bf2bd5b3ea9b0cbaf975cf
SHA1

527114b5e3b7a279d6aae6d29cbdcb8c6e302e5b
SHA256

29744e79bdfcd042385c648c9a63503bc8086f70266c9e2876f2dcb7c0309410
SHA512

53ae4e7e1815b940063861a5b9bcc3e87855ff5ac5c1cbd6b6cfd24bfe6946084ad96e6f920577c0c4188213c9a93f5e62e998777f0fec1433a26c87f62d53b0
SSDEEP

768:Y4BZwegjJmxWJQpk84Ul+3xOXB1IQGPL4vzZq2o9W7GsxBbPr:Y4BZ2Jm/kWmOXB1DGCq2iW7z

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  
  2025-03-21_b32a55d7d1bf2bd5b3ea9b0cbaf975cf_smoke-loader_wapomi
- Size
  
  36KB
- MD5
  
  b32a55d7d1bf2bd5b3ea9b0cbaf975cf
- SHA1
  
  527114b5e3b7a279d6aae6d29cbdcb8c6e302e5b
- SHA256
  
  29744e79bdfcd042385c648c9a63503bc8086f70266c9e2876f2dcb7c0309410
- SHA512
  
  53ae4e7e1815b940063861a5b9bcc3e87855ff5ac5c1cbd6b6cfd24bfe6946084ad96e6f920577c0c4188213c9a93f5e62e998777f0fec1433a26c87f62d53b0
- SSDEEP
  
  768:Y4BZwegjJmxWJQpk84Ul+3xOXB1IQGPL4vzZq2o9W7GsxBbPr:Y4BZ2Jm/kWmOXB1DGCq2iW7z
Score

10^/10

bdaejec aspackv2 backdoor discovery
- Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Bdaejec family
  bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Bdaejec family

Detects Bdaejec Backdoor.

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2