General
-
Target
b40bfa505b1edaea8452649668458c341fc257301a1f81a810a348d49fb34454
-
Size
464KB
-
Sample
241011-bxph6aybjd
-
MD5
07987d1a745ecd647896484686e26e9c
-
SHA1
8f2848222876dc8aa2d2200c0cbb9891b8b78038
-
SHA256
b40bfa505b1edaea8452649668458c341fc257301a1f81a810a348d49fb34454
-
SHA512
b99e9a4f21f43b4a8802c8be9135b38ba4087adbe2e611d001cbafa806c85149979417866e85828a80371747ecb4ba89384afa3bff2add38c9869d561577b212
-
SSDEEP
12288:p5NaIk7nsp5pahQ2hkhsYvCpJZ2u4Tsgm/:p5lB2hkhfvCpf2fTf
Static task
static1
Behavioral task
behavioral1
Sample
b40bfa505b1edaea8452649668458c341fc257301a1f81a810a348d49fb34454.exe
Resource
win7-20240729-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
b40bfa505b1edaea8452649668458c341fc257301a1f81a810a348d49fb34454
-
Size
464KB
-
MD5
07987d1a745ecd647896484686e26e9c
-
SHA1
8f2848222876dc8aa2d2200c0cbb9891b8b78038
-
SHA256
b40bfa505b1edaea8452649668458c341fc257301a1f81a810a348d49fb34454
-
SHA512
b99e9a4f21f43b4a8802c8be9135b38ba4087adbe2e611d001cbafa806c85149979417866e85828a80371747ecb4ba89384afa3bff2add38c9869d561577b212
-
SSDEEP
12288:p5NaIk7nsp5pahQ2hkhsYvCpJZ2u4Tsgm/:p5lB2hkhfvCpf2fTf
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-