General
-
Target
4c5aadd57a3202e14ad8d601e36d5712f9eb38bb22396b3a26c01f9a68007a60.exe
-
Size
96KB
-
Sample
241203-p9twaswpcw
-
MD5
fd772e274b00ba82cbc3e3153452fde3
-
SHA1
7994f3221f036f663048d4c7ffdf2f0c31b584f7
-
SHA256
4c5aadd57a3202e14ad8d601e36d5712f9eb38bb22396b3a26c01f9a68007a60
-
SHA512
9cc229a965bba977f9295ff329b9aecf598a20dc2642dec54d947b5064cd912bb0c0b8b35e4a3b9ced7bd680bca05e2ac84f02c89fb16edc16c1cf35ec7880e4
-
SSDEEP
1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1fLGCq2iW7za:pJLrp0cQ7QAINqPDHQnc0GCH2
Static task
static1
Behavioral task
behavioral1
Sample
4c5aadd57a3202e14ad8d601e36d5712f9eb38bb22396b3a26c01f9a68007a60.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
4c5aadd57a3202e14ad8d601e36d5712f9eb38bb22396b3a26c01f9a68007a60.exe
-
Size
96KB
-
MD5
fd772e274b00ba82cbc3e3153452fde3
-
SHA1
7994f3221f036f663048d4c7ffdf2f0c31b584f7
-
SHA256
4c5aadd57a3202e14ad8d601e36d5712f9eb38bb22396b3a26c01f9a68007a60
-
SHA512
9cc229a965bba977f9295ff329b9aecf598a20dc2642dec54d947b5064cd912bb0c0b8b35e4a3b9ced7bd680bca05e2ac84f02c89fb16edc16c1cf35ec7880e4
-
SSDEEP
1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1fLGCq2iW7za:pJLrp0cQ7QAINqPDHQnc0GCH2
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-