General
-
Target
4faba9ed83b00709192b3af0114a99bd5da022d656789b5ce0c126747d2fb113N
-
Size
272KB
-
Sample
241006-sz5ftswanf
-
MD5
6a55bf3288584d3cd973e65c3fa5bdd0
-
SHA1
9943ee3fb3719871aff991f7329ffcbd20ac4323
-
SHA256
4faba9ed83b00709192b3af0114a99bd5da022d656789b5ce0c126747d2fb113
-
SHA512
9773a8d1e5f4ef5d86a26d7f5eee889dabce593a14094ed7f64e8e443e3af10c13c1f3a8ff0a349a8d46cdf48737e89bc1286fb09ca231cfcd194eaef2eb65e5
-
SSDEEP
3072:Vt+dR1llX2xDpFuacFujhGa3/rQLAD/wWmzIBn7d4foB7nl5ejTnXGGCH:WlSDpABxavrQLKLl5en/
Static task
static1
Behavioral task
behavioral1
Sample
4faba9ed83b00709192b3af0114a99bd5da022d656789b5ce0c126747d2fb113N.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
4faba9ed83b00709192b3af0114a99bd5da022d656789b5ce0c126747d2fb113N
-
Size
272KB
-
MD5
6a55bf3288584d3cd973e65c3fa5bdd0
-
SHA1
9943ee3fb3719871aff991f7329ffcbd20ac4323
-
SHA256
4faba9ed83b00709192b3af0114a99bd5da022d656789b5ce0c126747d2fb113
-
SHA512
9773a8d1e5f4ef5d86a26d7f5eee889dabce593a14094ed7f64e8e443e3af10c13c1f3a8ff0a349a8d46cdf48737e89bc1286fb09ca231cfcd194eaef2eb65e5
-
SSDEEP
3072:Vt+dR1llX2xDpFuacFujhGa3/rQLAD/wWmzIBn7d4foB7nl5ejTnXGGCH:WlSDpABxavrQLKLl5en/
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-