General
-
Target
b5bbd08a0f090cf1439377dcef7f7c7e2c01b1ba785b25ecef921409eed52eacN
-
Size
19KB
-
Sample
241103-kbzxfazejp
-
MD5
a34c77d7eaaf8c46da965d1a7496ddc0
-
SHA1
913e42d7abc2dc246f851d178f5681ed3293579b
-
SHA256
b5bbd08a0f090cf1439377dcef7f7c7e2c01b1ba785b25ecef921409eed52eac
-
SHA512
500d49091bb2e3907ea541f86ead7a2694d7a7fe99b3986a75154de2b07312a6591a23bbf84c43388bf2c26c3f3bab18049a1966e91764c4395fa32f07ed7500
-
SSDEEP
384:1FOS2XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:PSQGPL4vzZq2o9W7GsxBbPr
Static task
static1
Behavioral task
behavioral1
Sample
b5bbd08a0f090cf1439377dcef7f7c7e2c01b1ba785b25ecef921409eed52eacN.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
b5bbd08a0f090cf1439377dcef7f7c7e2c01b1ba785b25ecef921409eed52eacN
-
Size
19KB
-
MD5
a34c77d7eaaf8c46da965d1a7496ddc0
-
SHA1
913e42d7abc2dc246f851d178f5681ed3293579b
-
SHA256
b5bbd08a0f090cf1439377dcef7f7c7e2c01b1ba785b25ecef921409eed52eac
-
SHA512
500d49091bb2e3907ea541f86ead7a2694d7a7fe99b3986a75154de2b07312a6591a23bbf84c43388bf2c26c3f3bab18049a1966e91764c4395fa32f07ed7500
-
SSDEEP
384:1FOS2XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:PSQGPL4vzZq2o9W7GsxBbPr
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-