General
-
Target
2024-12-04_e9fc2381cfd60a5353b73e6c394b5caf_avoslocker_luca-stealer_revil_wapomi
-
Size
12.1MB
-
Sample
241204-x4llqsxkdt
-
MD5
e9fc2381cfd60a5353b73e6c394b5caf
-
SHA1
61c84c9282eb870315e40992b45c65d9936cf84f
-
SHA256
f11968df196f1c4fa3be918636fff4a8068c26e3a1fd72a51122ca23585659c9
-
SHA512
e0b5bed3093db2351bf9df49955f8a49584601d01d0393910d192584daec9a7d423c2df0580aa68d0b1e4aa32e627024bd1fab3722a47b8f120b40acdb2a7cee
-
SSDEEP
196608:KqqKNdE37uPvvyqOnkhJsv6tWKFdu9Cie9GJ:KqqKNIC3bOSJsv6tWKFdu9Cdy
Static task
static1
Behavioral task
behavioral1
Sample
2024-12-04_e9fc2381cfd60a5353b73e6c394b5caf_avoslocker_luca-stealer_revil_wapomi.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2024-12-04_e9fc2381cfd60a5353b73e6c394b5caf_avoslocker_luca-stealer_revil_wapomi
-
Size
12.1MB
-
MD5
e9fc2381cfd60a5353b73e6c394b5caf
-
SHA1
61c84c9282eb870315e40992b45c65d9936cf84f
-
SHA256
f11968df196f1c4fa3be918636fff4a8068c26e3a1fd72a51122ca23585659c9
-
SHA512
e0b5bed3093db2351bf9df49955f8a49584601d01d0393910d192584daec9a7d423c2df0580aa68d0b1e4aa32e627024bd1fab3722a47b8f120b40acdb2a7cee
-
SSDEEP
196608:KqqKNdE37uPvvyqOnkhJsv6tWKFdu9Cie9GJ:KqqKNIC3bOSJsv6tWKFdu9Cdy
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Executes dropped EXE
-
Loads dropped DLL
-