bdaejec | 8b437110b82e99350d7fe474cd14175d93f8056a7be62b7566ceb436c09a153b

General

Target
СТИКС.мод.zip
Size 22.5MB
Sample260810-nb68asff76
SHA256 8b437110b82e99350d7fe474cd14175d93f8056a7be62b7566ceb436c09a153b
MD5 525ac97f869abf0a00521c017b57b5a5
SHA1 793b589da61669859568e5a92f2ea6a09a07aeac
SHA512 2880f677352258af6ff9ee28ab6a8aa65934e1a398bdbefde8ea49a233ab3d3c76ce018d48e97b9a55919757014c9ed5dad0efda91d5413894fcac948baf63fc
SSDEEP 393216:rif7yshOpWg5cYnsbieKdyH+3cQgX5c5foA5c+49F+bo5c3Fc2oudB:riTPhdg55n/C+3KX5E5H4J5WlX
TLSH
T14A3733A5F072EC84C7232A33C178DA9D4D6147C2E7675D4366A8950C88D7CFA2E6B4CE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  СТИКС.мод.zip
- Size 22.5MB
- SHA256 8b437110b82e99350d7fe474cd14175d93f8056a7be62b7566ceb436c09a153b
- MD5 525ac97f869abf0a00521c017b57b5a5
- SHA1 793b589da61669859568e5a92f2ea6a09a07aeac
- SHA512 2880f677352258af6ff9ee28ab6a8aa65934e1a398bdbefde8ea49a233ab3d3c76ce018d48e97b9a55919757014c9ed5dad0efda91d5413894fcac948baf63fc
- SSDEEP 393216:rif7yshOpWg5cYnsbieKdyH+3cQgX5c5foA5c+49F+bo5c3Fc2oudB:riTPhdg55n/C+3KX5E5H4J5WlX
- TLSH
  T14A3733A5F072EC84C7232A33C178DA9D4D6147C2E7675D4366A8950C88D7CFA2E6B4CE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

aspackv2 backdoor discovery bdaejec upx
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- Family: Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Bdaejec Backdoor.

Family: Bdaejec

ASPack v2.12-2.42

Executes dropped EXE

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2