General
-
Target
8b20cfe86f2ef778461bb0ef34add6703c4bef84eb40f1547585ff515365900c
-
Size
32KB
-
Sample
241026-2fn46szdra
-
MD5
803008f5f087c184df1a3569fbff0321
-
SHA1
e1a13695ad6a6dca16f89e1951ac6e2fb44e19d7
-
SHA256
8b20cfe86f2ef778461bb0ef34add6703c4bef84eb40f1547585ff515365900c
-
SHA512
aaf92024070f52ae9221a7127774411f426ea52ba3447643788a5132e6857fe05d29c57fe61b52662a90bc36ddfa84f6144905d5fc9e72e6ffc728b3ae89f1aa
-
SSDEEP
768:bQGPL4vzZq2o9W7GsxBbPrnzQGPL4vzZq2o9W7GsxBbPr:cGCq2iW7zjkGCq2iW7z
Static task
static1
Behavioral task
behavioral1
Sample
8b20cfe86f2ef778461bb0ef34add6703c4bef84eb40f1547585ff515365900c.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
8b20cfe86f2ef778461bb0ef34add6703c4bef84eb40f1547585ff515365900c
-
Size
32KB
-
MD5
803008f5f087c184df1a3569fbff0321
-
SHA1
e1a13695ad6a6dca16f89e1951ac6e2fb44e19d7
-
SHA256
8b20cfe86f2ef778461bb0ef34add6703c4bef84eb40f1547585ff515365900c
-
SHA512
aaf92024070f52ae9221a7127774411f426ea52ba3447643788a5132e6857fe05d29c57fe61b52662a90bc36ddfa84f6144905d5fc9e72e6ffc728b3ae89f1aa
-
SSDEEP
768:bQGPL4vzZq2o9W7GsxBbPrnzQGPL4vzZq2o9W7GsxBbPr:cGCq2iW7zjkGCq2iW7z
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-