Overview
overview
10Static
static
3OASIS AIO TOOL.rar
windows7-x64
1OASIS AIO TOOL.rar
windows10-2004-x64
1AdbWinApi.dll
windows7-x64
3AdbWinApi.dll
windows10-2004-x64
3OASIS AIO ...pi.dll
windows7-x64
3OASIS AIO ...pi.dll
windows10-2004-x64
3OASIS AIO ...OL.exe
windows7-x64
4OASIS AIO ...OL.exe
windows10-2004-x64
4OASIS AIO ...db.exe
windows7-x64
10OASIS AIO ...db.exe
windows10-2004-x64
10SHREDDER AIO TOOL.exe
windows7-x64
4SHREDDER AIO TOOL.exe
windows10-2004-x64
4adb.exe
windows7-x64
3adb.exe
windows10-2004-x64
3General
-
Target
OASIS AIO TOOL.rar
-
Size
39.7MB
-
Sample
241215-xfhvyavlcj
-
MD5
68e6410384b2f21bdda4b0dfe8671c37
-
SHA1
de87be74f853cc0d27c25a67ccb8ec631f512fbc
-
SHA256
2912ebfc163c970d25a666d2723682bfbf8e2a202867b12dc0fec6afa531497e
-
SHA512
400cfd7cb915bebe25034bd88823885277b8d54675209c1a5879a650380caa0b58bea6af251b280b7f24fbb2ab2c6606ac9f6ea4c04dd08442f3fb90439556d6
-
SSDEEP
786432:FSOqUL8WjI6USKtIpVaCBDSOqULgmmW/n0ICrgpD8b:+ALPKWJaav0Ioga
Static task
static1
Behavioral task
behavioral1
Sample
OASIS AIO TOOL.rar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
OASIS AIO TOOL.rar
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
AdbWinApi.dll
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
AdbWinApi.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
OASIS AIO TOOL/AdbWinApi.dll
Resource
win7-20241010-en
Behavioral task
behavioral6
Sample
OASIS AIO TOOL/AdbWinApi.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
OASIS AIO TOOL/SHREDDER AIO TOOL.exe
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
OASIS AIO TOOL/SHREDDER AIO TOOL.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
OASIS AIO TOOL/adb.exe
Resource
win7-20241023-en
Behavioral task
behavioral10
Sample
OASIS AIO TOOL/adb.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
SHREDDER AIO TOOL.exe
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
SHREDDER AIO TOOL.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
adb.exe
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
adb.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
OASIS AIO TOOL.rar
-
Size
39.7MB
-
MD5
68e6410384b2f21bdda4b0dfe8671c37
-
SHA1
de87be74f853cc0d27c25a67ccb8ec631f512fbc
-
SHA256
2912ebfc163c970d25a666d2723682bfbf8e2a202867b12dc0fec6afa531497e
-
SHA512
400cfd7cb915bebe25034bd88823885277b8d54675209c1a5879a650380caa0b58bea6af251b280b7f24fbb2ab2c6606ac9f6ea4c04dd08442f3fb90439556d6
-
SSDEEP
786432:FSOqUL8WjI6USKtIpVaCBDSOqULgmmW/n0ICrgpD8b:+ALPKWJaav0Ioga
Score1/10 -
-
-
Target
AdbWinApi.dll
-
Size
108KB
-
MD5
0c9fe1d2b6adf8bced775447a4f19545
-
SHA1
54c50cc56f5e8a9bb89055d3336295a9d0df9e12
-
SHA256
16ab72834348dd981bc4f18d6c0e1d55e7e6d94d620323b82ea6872c147adacf
-
SHA512
f13316a0b978ed53076f95c9bdae7eb63e33d0123ecdc1486afef3105c79be0d0889830997609189a85281f38a8b3cf2e7a8f7251cc36558457182c8f9750dfb
-
SSDEEP
1536:TLpCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt8xed3Ufm:/po0k6ZWVTaif6sCGiS9
Score3/10 -
-
-
Target
OASIS AIO TOOL/AdbWinApi.dll
-
Size
108KB
-
MD5
0c9fe1d2b6adf8bced775447a4f19545
-
SHA1
54c50cc56f5e8a9bb89055d3336295a9d0df9e12
-
SHA256
16ab72834348dd981bc4f18d6c0e1d55e7e6d94d620323b82ea6872c147adacf
-
SHA512
f13316a0b978ed53076f95c9bdae7eb63e33d0123ecdc1486afef3105c79be0d0889830997609189a85281f38a8b3cf2e7a8f7251cc36558457182c8f9750dfb
-
SSDEEP
1536:TLpCxybY0FS6MqS6WvgD9xj03TabrFvY5J6sCGt8xed3Ufm:/po0k6ZWVTaif6sCGiS9
Score3/10 -
-
-
Target
OASIS AIO TOOL/SHREDDER AIO TOOL.exe
-
Size
19.8MB
-
MD5
e0cf0457dac4e4acbdb265640c310270
-
SHA1
06bc3b50f8b74537f41e8f0401af339a125ded12
-
SHA256
3ca75f1ed33faeb3816c489498e8aa81d3180ab241378c5fbf42e66fadd0bfa0
-
SHA512
cd3e46ff692dddbd1538745328d07a6c777a82af5bdbb3685bfc203755028e011671bd7655480e6e871a6e174ec582eb47ee00cd5c1da81e1b58a07f0a29c7f9
-
SSDEEP
393216:6J5iiX1Wk0Hhnbzsv3e7sCdFVAXMSnKmA6a20fchaHUR:EllB0ZsvO7sCvg3a20fcBR
Score4/10 -
-
-
Target
OASIS AIO TOOL/adb.exe
-
Size
816KB
-
MD5
b16c4b8a4215ad7c9c012c7e9375af3e
-
SHA1
b4d67ed6ecf5af7b487c59770cb7ec9f12e6760c
-
SHA256
14ab5941dbc67eda143b082c80318e3606ba54d964267c1175ce728cce885a31
-
SHA512
43a6b0477342460fa3cf0517a925eb7e160b0c2f63a6be19d4d4cf0f7f693aed0838e8ab4906f9fea33a9083d4dce6dd59f9c578b9774838ae93b50d96ded95f
-
SSDEEP
12288:+5KIVNAIOlVvllPhcjpGsv6cViTIlZThJCmG11RuMYRO2fJpUGpdmTfFnIY:+5KYALlvlPyjpGo6cMTI7bqYaTfFnIY
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
-
-
Target
SHREDDER AIO TOOL.exe
-
Size
19.8MB
-
MD5
e0cf0457dac4e4acbdb265640c310270
-
SHA1
06bc3b50f8b74537f41e8f0401af339a125ded12
-
SHA256
3ca75f1ed33faeb3816c489498e8aa81d3180ab241378c5fbf42e66fadd0bfa0
-
SHA512
cd3e46ff692dddbd1538745328d07a6c777a82af5bdbb3685bfc203755028e011671bd7655480e6e871a6e174ec582eb47ee00cd5c1da81e1b58a07f0a29c7f9
-
SSDEEP
393216:6J5iiX1Wk0Hhnbzsv3e7sCdFVAXMSnKmA6a20fchaHUR:EllB0ZsvO7sCvg3a20fcBR
Score4/10 -
-
-
Target
adb.exe
-
Size
800KB
-
MD5
a4c00558488ebbbf952a873e1c6a65ae
-
SHA1
76a94af369a364fbc7fc8983a41a2763ec20bb40
-
SHA256
bba820b278ced0b9c9bcde334fe5bb825e4110f0a390c936425b186b973eeedc
-
SHA512
9abe617df5d0d87500a0fd9ffc3b1bc13ede908c36409a6d3f41e1d12ff585a1e50adcc85de372fb6925a40da6975c24e105a3d5b3b99d5ae420a90c57a5c88d
-
SSDEEP
12288:j5KIVNAIOlVvllPhcjpGsv6cViTIlZThJCmG11RuMYRO2fJpUGpdmTfFnIY:j5KYALlvlPyjpGo6cMTI7bqYaTfFnIY
Score3/10 -