General
-
Target
b5e818273f6951d62141068b1b89303381c0dc97590914dd03c34e382c01a747
-
Size
1.4MB
-
Sample
241201-prs62swkgk
-
MD5
d55d2c57e589db62994c82245150e3af
-
SHA1
2f112723056519f3a74a50156076a88b942b96ca
-
SHA256
b5e818273f6951d62141068b1b89303381c0dc97590914dd03c34e382c01a747
-
SHA512
c942b42d4eb8687d87b26acf14b5878588b2f78d81a31ec7791f9071146e72aa70da44acccbc76846bfd37e4697d62e31946cf7ca5b5dc5b5cea1ba09060db2d
-
SSDEEP
24576:TPb78OQMB7koSBDFAMLiHeRGx4QvKegJDE4TmrQLay6PEzDzGg2v:Tz77Lmy+Ex4QvKeg1ZGfj8zDag2v
Static task
static1
Behavioral task
behavioral1
Sample
b5e818273f6951d62141068b1b89303381c0dc97590914dd03c34e382c01a747.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
b5e818273f6951d62141068b1b89303381c0dc97590914dd03c34e382c01a747
-
Size
1.4MB
-
MD5
d55d2c57e589db62994c82245150e3af
-
SHA1
2f112723056519f3a74a50156076a88b942b96ca
-
SHA256
b5e818273f6951d62141068b1b89303381c0dc97590914dd03c34e382c01a747
-
SHA512
c942b42d4eb8687d87b26acf14b5878588b2f78d81a31ec7791f9071146e72aa70da44acccbc76846bfd37e4697d62e31946cf7ca5b5dc5b5cea1ba09060db2d
-
SSDEEP
24576:TPb78OQMB7koSBDFAMLiHeRGx4QvKegJDE4TmrQLay6PEzDzGg2v:Tz77Lmy+Ex4QvKeg1ZGfj8zDag2v
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-