General
-
Target
cce52d6a9dedd34263be9fbb16dd784ba2bae8081cc26f8be85776e781c06a88
-
Size
19KB
-
Sample
241126-ep14rszper
-
MD5
28246803fe4eb75637d7cacc7ee9bf13
-
SHA1
b4d9e0c3cbb4e646ff845c06bda2d7f66a28ee3c
-
SHA256
cce52d6a9dedd34263be9fbb16dd784ba2bae8081cc26f8be85776e781c06a88
-
SHA512
9bb67e9febf8f1d9e4666130f4c06c7b038a863ea88566597abcca0cdb8aae6ae23116de707c0506984168071c9e04632bfa1113e71bbff010d073a2ee3f1b0a
-
SSDEEP
384:1F5SjXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:sdQGPL4vzZq2o9W7GsxBbPr
Static task
static1
Behavioral task
behavioral1
Sample
cce52d6a9dedd34263be9fbb16dd784ba2bae8081cc26f8be85776e781c06a88.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
cce52d6a9dedd34263be9fbb16dd784ba2bae8081cc26f8be85776e781c06a88
-
Size
19KB
-
MD5
28246803fe4eb75637d7cacc7ee9bf13
-
SHA1
b4d9e0c3cbb4e646ff845c06bda2d7f66a28ee3c
-
SHA256
cce52d6a9dedd34263be9fbb16dd784ba2bae8081cc26f8be85776e781c06a88
-
SHA512
9bb67e9febf8f1d9e4666130f4c06c7b038a863ea88566597abcca0cdb8aae6ae23116de707c0506984168071c9e04632bfa1113e71bbff010d073a2ee3f1b0a
-
SSDEEP
384:1F5SjXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:sdQGPL4vzZq2o9W7GsxBbPr
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-