General
-
Target
bb5b3d0baceb9ea5af3551fb882c020df4d1c80844d24bfa10278136c32d7b82
-
Size
3.2MB
-
Sample
241019-cx7keatflr
-
MD5
2ffe35ac01a3db55b67fbcfce29c6466
-
SHA1
be7724546e8820dff4c6b126745fd6dc151ff632
-
SHA256
bb5b3d0baceb9ea5af3551fb882c020df4d1c80844d24bfa10278136c32d7b82
-
SHA512
ebf6b179512cfd9ccfeed2cfa00ed304bc8262966fbe0c7eb95a436e3919cafb90a18035c143f0cb0ac3c4c8eedceb1ffa5e2cac37c8788c6b5cdc642e65c5b8
-
SSDEEP
98304:FPq1dQa+ZfTSkt1tLoupNJoUyAIKuDTxvqBMFa3BjaaSYj22MsPclC8G:bLZfTSStLoiyAItTxvqBMFa3Bjaatj2O
Static task
static1
Behavioral task
behavioral1
Sample
bb5b3d0baceb9ea5af3551fb882c020df4d1c80844d24bfa10278136c32d7b82.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
bb5b3d0baceb9ea5af3551fb882c020df4d1c80844d24bfa10278136c32d7b82
-
Size
3.2MB
-
MD5
2ffe35ac01a3db55b67fbcfce29c6466
-
SHA1
be7724546e8820dff4c6b126745fd6dc151ff632
-
SHA256
bb5b3d0baceb9ea5af3551fb882c020df4d1c80844d24bfa10278136c32d7b82
-
SHA512
ebf6b179512cfd9ccfeed2cfa00ed304bc8262966fbe0c7eb95a436e3919cafb90a18035c143f0cb0ac3c4c8eedceb1ffa5e2cac37c8788c6b5cdc642e65c5b8
-
SSDEEP
98304:FPq1dQa+ZfTSkt1tLoupNJoUyAIKuDTxvqBMFa3BjaaSYj22MsPclC8G:bLZfTSStLoiyAItTxvqBMFa3Bjaatj2O
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-