General
-
Target
58941248f0f0ecbadef4f5ccdf9343b045961b4cf3161b1a4423377b79fc61e2N.exe
-
Size
72KB
-
Sample
241205-pwpdnavmas
-
MD5
b293ca96c62a287191eacdec7326b990
-
SHA1
1ff15bda0fef2793d3d05239a5705b9a5ca7681d
-
SHA256
58941248f0f0ecbadef4f5ccdf9343b045961b4cf3161b1a4423377b79fc61e2
-
SHA512
b258979c5cc9e2036d425aa086826f8dbdedef8ed4d36fa92b50d04a4e16722428e6548b0139a4f668408324b6dc39137f0c15bef32d0c128ddef96c3a4b687e
-
SSDEEP
768:Qdwz0k23YXEL5kYcDjf19W6q0GEiMywPoTVIgsQGPL4vzZq2o9W7GsxBbPr:7e6HfDWs3oTVPvGCq2iW7z
Static task
static1
Behavioral task
behavioral1
Sample
58941248f0f0ecbadef4f5ccdf9343b045961b4cf3161b1a4423377b79fc61e2N.exe
Resource
win7-20241023-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
58941248f0f0ecbadef4f5ccdf9343b045961b4cf3161b1a4423377b79fc61e2N.exe
-
Size
72KB
-
MD5
b293ca96c62a287191eacdec7326b990
-
SHA1
1ff15bda0fef2793d3d05239a5705b9a5ca7681d
-
SHA256
58941248f0f0ecbadef4f5ccdf9343b045961b4cf3161b1a4423377b79fc61e2
-
SHA512
b258979c5cc9e2036d425aa086826f8dbdedef8ed4d36fa92b50d04a4e16722428e6548b0139a4f668408324b6dc39137f0c15bef32d0c128ddef96c3a4b687e
-
SSDEEP
768:Qdwz0k23YXEL5kYcDjf19W6q0GEiMywPoTVIgsQGPL4vzZq2o9W7GsxBbPr:7e6HfDWs3oTVPvGCq2iW7z
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-