General

  • Target

    32d903b7ba0147cec4b8951bf2c159f82f6c2688269fcd0a875e598761b2dd1d

  • Size

    1.2MB

  • Sample

    250418-bzxmjsx1ez

  • MD5

    de6b32fec3afaf054d161a640edd9702

  • SHA1

    e1d8021ebc806762a5f073340a9f1ac3f0b2c1fb

  • SHA256

    32d903b7ba0147cec4b8951bf2c159f82f6c2688269fcd0a875e598761b2dd1d

  • SHA512

    30a2a6a6d3327f71013cb04e08739b985f86f10e02bce9addfba2fa277759b7d209085ce64666aa1057a09f7f50023770eefb7820296337d838613d122e70f60

  • SSDEEP

    24576:/VrDyMW8yvu2NYLYg1fLRaGhZJQkkkkMjgrB:N/iXoNhoGfJQkkkkMjgr

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      32d903b7ba0147cec4b8951bf2c159f82f6c2688269fcd0a875e598761b2dd1d

    • Size

      1.2MB

    • MD5

      de6b32fec3afaf054d161a640edd9702

    • SHA1

      e1d8021ebc806762a5f073340a9f1ac3f0b2c1fb

    • SHA256

      32d903b7ba0147cec4b8951bf2c159f82f6c2688269fcd0a875e598761b2dd1d

    • SHA512

      30a2a6a6d3327f71013cb04e08739b985f86f10e02bce9addfba2fa277759b7d209085ce64666aa1057a09f7f50023770eefb7820296337d838613d122e70f60

    • SSDEEP

      24576:/VrDyMW8yvu2NYLYg1fLRaGhZJQkkkkMjgrB:N/iXoNhoGfJQkkkkMjgr

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks