General
-
Target
da091d699a88251cfe0eee508e0137a3bf174e7e2aa1088fd6dc494012a99b07
-
Size
52KB
-
Sample
241025-g42d7awgrn
-
MD5
b900e9796b2c23cc9f7a976916fd7244
-
SHA1
3c2f2c12b08be97082fab3c7599d2993789cd222
-
SHA256
da091d699a88251cfe0eee508e0137a3bf174e7e2aa1088fd6dc494012a99b07
-
SHA512
502603f4042f59977465abe1ca43c0b551ab636eed998e1a641822bb0c31bfca71e6a2464a7ec476fd2d278c1bf6c426170c5ce1247d87afdc21342c731dc291
-
SSDEEP
768:QVMe3Vk9haLNFZ131W8g/78QGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/7fGCq2iW7z
Static task
static1
Behavioral task
behavioral1
Sample
da091d699a88251cfe0eee508e0137a3bf174e7e2aa1088fd6dc494012a99b07.exe
Resource
win7-20240708-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
da091d699a88251cfe0eee508e0137a3bf174e7e2aa1088fd6dc494012a99b07
-
Size
52KB
-
MD5
b900e9796b2c23cc9f7a976916fd7244
-
SHA1
3c2f2c12b08be97082fab3c7599d2993789cd222
-
SHA256
da091d699a88251cfe0eee508e0137a3bf174e7e2aa1088fd6dc494012a99b07
-
SHA512
502603f4042f59977465abe1ca43c0b551ab636eed998e1a641822bb0c31bfca71e6a2464a7ec476fd2d278c1bf6c426170c5ce1247d87afdc21342c731dc291
-
SSDEEP
768:QVMe3Vk9haLNFZ131W8g/78QGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/7fGCq2iW7z
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-