General
-
Target
ba85fc92d05875f82e71163894723d68bd599c4a38df236f80b7c2b8b632ef56N
-
Size
52KB
-
Sample
241022-bv6dws1bmm
-
MD5
64aeb58341e253fbd5ea45a92438f650
-
SHA1
3242322c9fcb6cd9d101c8cdbfda1b915369b95b
-
SHA256
ba85fc92d05875f82e71163894723d68bd599c4a38df236f80b7c2b8b632ef56
-
SHA512
684357cfb16bb81413e69de20453163d526bbd9210301eed3743ed74285aeba138463daa577d5ac77d1465e64ba24df90b06674f1f43f5e8eb52d75f71be6615
-
SSDEEP
768:LAc884T68rN3dpQGPL4vzZq2o9W7GsxBbPr:Hi68rNN+GCq2iW7z
Static task
static1
Behavioral task
behavioral1
Sample
ba85fc92d05875f82e71163894723d68bd599c4a38df236f80b7c2b8b632ef56N.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
ba85fc92d05875f82e71163894723d68bd599c4a38df236f80b7c2b8b632ef56N
-
Size
52KB
-
MD5
64aeb58341e253fbd5ea45a92438f650
-
SHA1
3242322c9fcb6cd9d101c8cdbfda1b915369b95b
-
SHA256
ba85fc92d05875f82e71163894723d68bd599c4a38df236f80b7c2b8b632ef56
-
SHA512
684357cfb16bb81413e69de20453163d526bbd9210301eed3743ed74285aeba138463daa577d5ac77d1465e64ba24df90b06674f1f43f5e8eb52d75f71be6615
-
SSDEEP
768:LAc884T68rN3dpQGPL4vzZq2o9W7GsxBbPr:Hi68rNN+GCq2iW7z
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-