General

  • Target

    2025-04-17_4ef7486b79c05e74e914ee1dc9223ea0_amadey_black-basta_cobalt-strike_elex_luca-stealer_wapomi

  • Size

    572KB

  • Sample

    250417-p9kydsypt9

  • MD5

    4ef7486b79c05e74e914ee1dc9223ea0

  • SHA1

    b8bc560a79e53c8518c96d607f914129326499b7

  • SHA256

    dc0f50a80413fe67c772763bab3e1e6d67e3d58a80e9e8586e6c7f300d22acc6

  • SHA512

    2fa51321532c07dc4ebdc0a28bceaa4a5fbb13260728aacd7d3c6b920293776c67cf26d32d37daf2024e66d7474ec43883100a07e1a845d76669e6f230bcd457

  • SSDEEP

    12288:96+OkYKllc/IwoG4fDXirqZ1xQMAejKv4fkuRdujMhVtr+pHb5hbczs/s4yxGMoM:4+N/Sw3G4fWG3+U5ujMNQv04yxtb1yH0

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-04-17_4ef7486b79c05e74e914ee1dc9223ea0_amadey_black-basta_cobalt-strike_elex_luca-stealer_wapomi

    • Size

      572KB

    • MD5

      4ef7486b79c05e74e914ee1dc9223ea0

    • SHA1

      b8bc560a79e53c8518c96d607f914129326499b7

    • SHA256

      dc0f50a80413fe67c772763bab3e1e6d67e3d58a80e9e8586e6c7f300d22acc6

    • SHA512

      2fa51321532c07dc4ebdc0a28bceaa4a5fbb13260728aacd7d3c6b920293776c67cf26d32d37daf2024e66d7474ec43883100a07e1a845d76669e6f230bcd457

    • SSDEEP

      12288:96+OkYKllc/IwoG4fDXirqZ1xQMAejKv4fkuRdujMhVtr+pHb5hbczs/s4yxGMoM:4+N/Sw3G4fWG3+U5ujMNQv04yxtb1yH0

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks