General
-
Target
Spoofer-ZaxaR.exe
-
Size
723KB
-
Sample
241103-zhnv3swqar
-
MD5
cd537a991f54a5735faf943bc64cc331
-
SHA1
2b78937dbe5817243913091bfca92ce65a10dc9a
-
SHA256
9e1067edf5077a1a785034ea20c3d8ff13a915d630ba9df49a6487fed3a3d977
-
SHA512
70bd9033071a5b9fd4b567b6c70d674fc685147bde3318f177570b14eda731cbb86290ab393e9f6d7244648f5cc2488cdd3a2273337784679f5313e779df1889
-
SSDEEP
12288:voSWNT4EBCpw1RI+d8uRFYbh7yIcR9NmLPyEXU0eJtf4GvHnPg:voS2T4i1Nd8KuDYNeqcUJpf
Static task
static1
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
Spoofer-ZaxaR.exe
-
Size
723KB
-
MD5
cd537a991f54a5735faf943bc64cc331
-
SHA1
2b78937dbe5817243913091bfca92ce65a10dc9a
-
SHA256
9e1067edf5077a1a785034ea20c3d8ff13a915d630ba9df49a6487fed3a3d977
-
SHA512
70bd9033071a5b9fd4b567b6c70d674fc685147bde3318f177570b14eda731cbb86290ab393e9f6d7244648f5cc2488cdd3a2273337784679f5313e779df1889
-
SSDEEP
12288:voSWNT4EBCpw1RI+d8uRFYbh7yIcR9NmLPyEXU0eJtf4GvHnPg:voS2T4i1Nd8KuDYNeqcUJpf
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-