General

  • Target

    cde56e97a0f8848109a5a6f4ad7421a070bdd572733c6256f2b75a3ba830f457

  • Size

    124KB

  • Sample

    250410-fdwkks1ygy

  • MD5

    63757cc7e0a218c05fd3cfc6a16736aa

  • SHA1

    19a11c0ea2144e08d105ca11f699261d0ea8537f

  • SHA256

    cde56e97a0f8848109a5a6f4ad7421a070bdd572733c6256f2b75a3ba830f457

  • SHA512

    a91629ee0ba7f8661096225d4f8a5769539e62c9e30c004163b0f8cf1d67d273c7116392c0998399bbbca4a0cd1e30677b59709f659d88efddac805ac5f978dd

  • SSDEEP

    3072:11t7YTgCJXDiDJnmLkFlD9UCawY3MyiXHEKpUgbGCH:2cCJXkY93B8k6UZ

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      cde56e97a0f8848109a5a6f4ad7421a070bdd572733c6256f2b75a3ba830f457

    • Size

      124KB

    • MD5

      63757cc7e0a218c05fd3cfc6a16736aa

    • SHA1

      19a11c0ea2144e08d105ca11f699261d0ea8537f

    • SHA256

      cde56e97a0f8848109a5a6f4ad7421a070bdd572733c6256f2b75a3ba830f457

    • SHA512

      a91629ee0ba7f8661096225d4f8a5769539e62c9e30c004163b0f8cf1d67d273c7116392c0998399bbbca4a0cd1e30677b59709f659d88efddac805ac5f978dd

    • SSDEEP

      3072:11t7YTgCJXDiDJnmLkFlD9UCawY3MyiXHEKpUgbGCH:2cCJXkY93B8k6UZ

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks