General
-
Target
3bc6b2e849f61c52f74a7c597892906c820882fc1cc5e51ff912a1a282db3a30N
-
Size
1.2MB
-
Sample
241030-mctg6azmfw
-
MD5
7b63b96026b70bdf79b4f094905d8a50
-
SHA1
cc637ea01e8c0232cd6a22ab7ca884936359a394
-
SHA256
3bc6b2e849f61c52f74a7c597892906c820882fc1cc5e51ff912a1a282db3a30
-
SHA512
85e4f07262a30d302de22e8ca8ad3e4eed9e060e5d9f9403522e0f7fef38769ca74dc38addf323c8a21a76e40a8d9c7d29a2d8f5419757f178c3a1a327c45dd2
-
SSDEEP
24576:94QSoaZeSaWi8yus7RMiP84Icjj9TRWT65DNy09x/b:+vhwF7RMu84V9TwT657Vb
Static task
static1
Behavioral task
behavioral1
Sample
3bc6b2e849f61c52f74a7c597892906c820882fc1cc5e51ff912a1a282db3a30N.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
3bc6b2e849f61c52f74a7c597892906c820882fc1cc5e51ff912a1a282db3a30N
-
Size
1.2MB
-
MD5
7b63b96026b70bdf79b4f094905d8a50
-
SHA1
cc637ea01e8c0232cd6a22ab7ca884936359a394
-
SHA256
3bc6b2e849f61c52f74a7c597892906c820882fc1cc5e51ff912a1a282db3a30
-
SHA512
85e4f07262a30d302de22e8ca8ad3e4eed9e060e5d9f9403522e0f7fef38769ca74dc38addf323c8a21a76e40a8d9c7d29a2d8f5419757f178c3a1a327c45dd2
-
SSDEEP
24576:94QSoaZeSaWi8yus7RMiP84Icjj9TRWT65DNy09x/b:+vhwF7RMu84V9TwT657Vb
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-