General

  • Target

    2dc34c2bb9bb86e0545def51eaf58a61cdcd11aa88f28aafd3aedb716085800a

  • Size

    70KB

  • Sample

    250408-f667saxqy5

  • MD5

    ff9a9a984cc13a0c81020f8d7f689caa

  • SHA1

    c65753bb2876369ad9338768f4c8559b65a9e330

  • SHA256

    2dc34c2bb9bb86e0545def51eaf58a61cdcd11aa88f28aafd3aedb716085800a

  • SHA512

    6fb44f064d9c0156b28b342a3c3a78cec1cdb12c22d8c8b59a32c9395abd6907ca40ba5c130d58ed1edb5799bf872e5b277b7385b852ee7220132fbc2ba49fa2

  • SSDEEP

    768:LqNeoRF/aCHPcOlvzrWVlXn0T4T9jlxsN/eFSQGPL4vzZq2o9W7GsxBbPr:B8HPcOlvOVF0T4lENmFhGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2dc34c2bb9bb86e0545def51eaf58a61cdcd11aa88f28aafd3aedb716085800a

    • Size

      70KB

    • MD5

      ff9a9a984cc13a0c81020f8d7f689caa

    • SHA1

      c65753bb2876369ad9338768f4c8559b65a9e330

    • SHA256

      2dc34c2bb9bb86e0545def51eaf58a61cdcd11aa88f28aafd3aedb716085800a

    • SHA512

      6fb44f064d9c0156b28b342a3c3a78cec1cdb12c22d8c8b59a32c9395abd6907ca40ba5c130d58ed1edb5799bf872e5b277b7385b852ee7220132fbc2ba49fa2

    • SSDEEP

      768:LqNeoRF/aCHPcOlvzrWVlXn0T4T9jlxsN/eFSQGPL4vzZq2o9W7GsxBbPr:B8HPcOlvOVF0T4lENmFhGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks