General

  • Target

    967497f124c5bb08cda62bdb0f12cb0444085f5f542b69cf52c4609501c8dc0a

  • Size

    168KB

  • Sample

    250408-cx2ddsxwfs

  • MD5

    9db957e4b9bc9fb5a1b10ca21f8b46c1

  • SHA1

    4275b2e6787732561b20d9cb6c5943db5c82059f

  • SHA256

    967497f124c5bb08cda62bdb0f12cb0444085f5f542b69cf52c4609501c8dc0a

  • SHA512

    ba09cbbef80a1dfba06f1e81cddbf1fc6df5d6b14727daba577babc45069d69718ecec5d3980eb7d8119dfff6c3064da73b98403734a13bfdb736ec4d38b5478

  • SSDEEP

    3072:Wue7RUwFrbIa+74bJFYNY1kGB+P0yGCH:Wue72eIaJcNY9+Pi

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      967497f124c5bb08cda62bdb0f12cb0444085f5f542b69cf52c4609501c8dc0a

    • Size

      168KB

    • MD5

      9db957e4b9bc9fb5a1b10ca21f8b46c1

    • SHA1

      4275b2e6787732561b20d9cb6c5943db5c82059f

    • SHA256

      967497f124c5bb08cda62bdb0f12cb0444085f5f542b69cf52c4609501c8dc0a

    • SHA512

      ba09cbbef80a1dfba06f1e81cddbf1fc6df5d6b14727daba577babc45069d69718ecec5d3980eb7d8119dfff6c3064da73b98403734a13bfdb736ec4d38b5478

    • SSDEEP

      3072:Wue7RUwFrbIa+74bJFYNY1kGB+P0yGCH:Wue72eIaJcNY9+Pi

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks