General

  • Target

    2025-04-12_b1d04c80014757d302063fc653509558_elex_karagany_mafia_rhadamanthys_wapomi

  • Size

    103KB

  • Sample

    250412-wqq4mayrv9

  • MD5

    b1d04c80014757d302063fc653509558

  • SHA1

    004447d6a6e9dd5e31f46bd9e7c05a5f439291cf

  • SHA256

    ff33f02a8b559a0cb07bdf3fa8fd4ff79a122dfb0dbad270a8c61413264c3618

  • SHA512

    f7c33be0671a6ad17b5d6e4018149f5b57bd47a7e21dacdd8ebf3c99f7565e50cc8ab5a4b84826e246b320b83fd8222cdd9400830265f2ad2cbbd2826906ce15

  • SSDEEP

    1536:m+yH60qqTARown0F9tTcSJKr4/HIapiu5wpR9YHE4GCq2iW7z:m/NkownOvKAHIapiewpR9YHxGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-04-12_b1d04c80014757d302063fc653509558_elex_karagany_mafia_rhadamanthys_wapomi

    • Size

      103KB

    • MD5

      b1d04c80014757d302063fc653509558

    • SHA1

      004447d6a6e9dd5e31f46bd9e7c05a5f439291cf

    • SHA256

      ff33f02a8b559a0cb07bdf3fa8fd4ff79a122dfb0dbad270a8c61413264c3618

    • SHA512

      f7c33be0671a6ad17b5d6e4018149f5b57bd47a7e21dacdd8ebf3c99f7565e50cc8ab5a4b84826e246b320b83fd8222cdd9400830265f2ad2cbbd2826906ce15

    • SSDEEP

      1536:m+yH60qqTARown0F9tTcSJKr4/HIapiu5wpR9YHE4GCq2iW7z:m/NkownOvKAHIapiewpR9YHxGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks