Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-03-25_6069a8244d0076a3bc521aa63548f1c4_icedid_luca-stealer_wapomi

  • Size

    4.5MB

  • Sample

    250325-pbj87syrw5

  • MD5

    6069a8244d0076a3bc521aa63548f1c4

  • SHA1

    cedc0bde4608e084b0197deff30c0ce9b72d458c

  • SHA256

    e5d73960a91b16e6cb7fc8f7c9a230110aa059a2c6059f809405f5ae83f09217

  • SHA512

    fac570ca41c2b994d3690df8bc935a657cff83fafa717fdcfe55ea5e91296c5ae701c63f2ea2c4c2b2f30246c87cac12be68975f0b0c96a376b9428f5abc1124

  • SSDEEP

    98304:4b5FCCOeA8M8NqONbG9TZtp4FoCD0kE1+BVpKrx4DgvOpZbS:25M4NCTMd0kHpKrx4D4OpZbS

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-03-25_6069a8244d0076a3bc521aa63548f1c4_icedid_luca-stealer_wapomi

    • Size

      4.5MB

    • MD5

      6069a8244d0076a3bc521aa63548f1c4

    • SHA1

      cedc0bde4608e084b0197deff30c0ce9b72d458c

    • SHA256

      e5d73960a91b16e6cb7fc8f7c9a230110aa059a2c6059f809405f5ae83f09217

    • SHA512

      fac570ca41c2b994d3690df8bc935a657cff83fafa717fdcfe55ea5e91296c5ae701c63f2ea2c4c2b2f30246c87cac12be68975f0b0c96a376b9428f5abc1124

    • SSDEEP

      98304:4b5FCCOeA8M8NqONbG9TZtp4FoCD0kE1+BVpKrx4DgvOpZbS:25M4NCTMd0kHpKrx4D4OpZbS

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks