General
-
Target
15cf92b00601fa0510d50d715719630d08647f404afa92fada73b4db3a4dfe0b
-
Size
188KB
-
Sample
241129-ytjvtstmaz
-
MD5
a7b210aec6bb20bb6ea901c5cb4584e7
-
SHA1
3bff102f4e4b2e3d20e3deffb489dacb732e60cb
-
SHA256
15cf92b00601fa0510d50d715719630d08647f404afa92fada73b4db3a4dfe0b
-
SHA512
733dba6e9c2633a5abdfc6a4aefdf2cd76f15c9bf9cb3e21aa26b43061b5dc7bc65b84aef6a5b534521c5ee6ddd22317c5b945b613194846c0acba2b8e4d4669
-
SSDEEP
3072:ZOQvsEYpQaFc6wwj/eXGwKrYQRbLNj7O/QYmN:1TZa61KrRbH
Static task
static1
Behavioral task
behavioral1
Sample
15cf92b00601fa0510d50d715719630d08647f404afa92fada73b4db3a4dfe0b.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
1.dnsnb8.net
Targets
-
-
Target
15cf92b00601fa0510d50d715719630d08647f404afa92fada73b4db3a4dfe0b
-
Size
188KB
-
MD5
a7b210aec6bb20bb6ea901c5cb4584e7
-
SHA1
3bff102f4e4b2e3d20e3deffb489dacb732e60cb
-
SHA256
15cf92b00601fa0510d50d715719630d08647f404afa92fada73b4db3a4dfe0b
-
SHA512
733dba6e9c2633a5abdfc6a4aefdf2cd76f15c9bf9cb3e21aa26b43061b5dc7bc65b84aef6a5b534521c5ee6ddd22317c5b945b613194846c0acba2b8e4d4669
-
SSDEEP
3072:ZOQvsEYpQaFc6wwj/eXGwKrYQRbLNj7O/QYmN:1TZa61KrRbH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-