General
-
Target
c1b1266e1e09d2cde5cc8bc3b75320953867fc8a3508e433932a971e8d8e98b6N.exe
-
Size
52KB
-
Sample
241129-1ytxpsylev
-
MD5
b9f63df70505ebd110e1a17e18119b70
-
SHA1
3bd456a8383540e6cd9e34ea04cb13bb22cfefe4
-
SHA256
c1b1266e1e09d2cde5cc8bc3b75320953867fc8a3508e433932a971e8d8e98b6
-
SHA512
83007dd60c55bdd70379c9a5fcf7fbe5d6524beb49feaae137789fff174e1ba31ebe94db3422a528b55e4260c7cf2d5d51215e7bfe05b65240f21ede597c34db
-
SSDEEP
768:QVMe3Vk9haLNFZ131W8g/5vQGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/5oGCq2iW7z
Static task
static1
Behavioral task
behavioral1
Sample
c1b1266e1e09d2cde5cc8bc3b75320953867fc8a3508e433932a971e8d8e98b6N.exe
Resource
win7-20240708-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
c1b1266e1e09d2cde5cc8bc3b75320953867fc8a3508e433932a971e8d8e98b6N.exe
-
Size
52KB
-
MD5
b9f63df70505ebd110e1a17e18119b70
-
SHA1
3bd456a8383540e6cd9e34ea04cb13bb22cfefe4
-
SHA256
c1b1266e1e09d2cde5cc8bc3b75320953867fc8a3508e433932a971e8d8e98b6
-
SHA512
83007dd60c55bdd70379c9a5fcf7fbe5d6524beb49feaae137789fff174e1ba31ebe94db3422a528b55e4260c7cf2d5d51215e7bfe05b65240f21ede597c34db
-
SSDEEP
768:QVMe3Vk9haLNFZ131W8g/5vQGPL4vzZq2o9W7GsxBbPr:uMASiLNFZdO/5oGCq2iW7z
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-