General
-
Target
c9a83ab273a7aac3492fea7c0ffc99356dc8697c758737755826980ae1a5fdb1
-
Size
667KB
-
Sample
241130-de939aylfy
-
MD5
d973e7490f073b121f356d3341165ca5
-
SHA1
864297bb5b6a24509a4942939179c24f2063f885
-
SHA256
c9a83ab273a7aac3492fea7c0ffc99356dc8697c758737755826980ae1a5fdb1
-
SHA512
09fed17cd40e730a8f8e4af868674b9630204bb6b8da75afc3e8686b5f1b045f5d5b83482e2970cdd726bcbdda933983c6e86e7e84abced32360cee86acde1a7
-
SSDEEP
12288:G825KUadcQSgbeWXQyd9FsorI2mtj4qYb4s5uM1f72EqQF03JBNmdFnoS:3HdcXgaUQyzFpstjBYV5VDF6JjmdF
Behavioral task
behavioral1
Sample
c9a83ab273a7aac3492fea7c0ffc99356dc8697c758737755826980ae1a5fdb1.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
c9a83ab273a7aac3492fea7c0ffc99356dc8697c758737755826980ae1a5fdb1
-
Size
667KB
-
MD5
d973e7490f073b121f356d3341165ca5
-
SHA1
864297bb5b6a24509a4942939179c24f2063f885
-
SHA256
c9a83ab273a7aac3492fea7c0ffc99356dc8697c758737755826980ae1a5fdb1
-
SHA512
09fed17cd40e730a8f8e4af868674b9630204bb6b8da75afc3e8686b5f1b045f5d5b83482e2970cdd726bcbdda933983c6e86e7e84abced32360cee86acde1a7
-
SSDEEP
12288:G825KUadcQSgbeWXQyd9FsorI2mtj4qYb4s5uM1f72EqQF03JBNmdFnoS:3HdcXgaUQyzFpstjBYV5VDF6JjmdF
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-