General
-
Target
34aa3f7cd0493e2a8d5258a3cbe7ee1e0c7d53e0b8549d84989cc4a5ce17386cN
-
Size
19KB
-
Sample
241021-zf5qtaveng
-
MD5
fa9b94d1b6fe18d76493bc486da97fa0
-
SHA1
d8a6b7c937eee335f5aa352b74466357b0157b3a
-
SHA256
34aa3f7cd0493e2a8d5258a3cbe7ee1e0c7d53e0b8549d84989cc4a5ce17386c
-
SHA512
3e8e7486d8adb420361ddb54ff7b9bbeec4748b0044a4a00f9e60138b87b147a21f16fde877f207bfa292bb01a850ef50444ff85104b98d6fde54952459b745d
-
SSDEEP
384:1FxSBXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:UfQGPL4vzZq2o9W7GsxBbPr
Static task
static1
Behavioral task
behavioral1
Sample
34aa3f7cd0493e2a8d5258a3cbe7ee1e0c7d53e0b8549d84989cc4a5ce17386cN.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
34aa3f7cd0493e2a8d5258a3cbe7ee1e0c7d53e0b8549d84989cc4a5ce17386cN
-
Size
19KB
-
MD5
fa9b94d1b6fe18d76493bc486da97fa0
-
SHA1
d8a6b7c937eee335f5aa352b74466357b0157b3a
-
SHA256
34aa3f7cd0493e2a8d5258a3cbe7ee1e0c7d53e0b8549d84989cc4a5ce17386c
-
SHA512
3e8e7486d8adb420361ddb54ff7b9bbeec4748b0044a4a00f9e60138b87b147a21f16fde877f207bfa292bb01a850ef50444ff85104b98d6fde54952459b745d
-
SSDEEP
384:1FxSBXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:UfQGPL4vzZq2o9W7GsxBbPr
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-