General
-
Target
176ea76776067006d8c12a697cf9ab18883d89dceb9b73f2f3c5d996bf3cbb3d.exe
-
Size
96KB
-
Sample
241218-bemlvavrgs
-
MD5
3014298fba4398181164eaae5b96730a
-
SHA1
c82af38c0a4047fb40e1c08eba0126d621591b7f
-
SHA256
176ea76776067006d8c12a697cf9ab18883d89dceb9b73f2f3c5d996bf3cbb3d
-
SHA512
a34c71e211f6cd822f0792db58bcd383e37d552cfcd104a6e1d0014390503af42d4969beede31e2ab1891150f6fc9ca71d2dd4f2afcd74720f6d9d9b0c2f0476
-
SSDEEP
1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1yyGCq2iW7zu:pJLrp0cQ7QAINqPDHQncKGCHi
Static task
static1
Behavioral task
behavioral1
Sample
176ea76776067006d8c12a697cf9ab18883d89dceb9b73f2f3c5d996bf3cbb3d.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
176ea76776067006d8c12a697cf9ab18883d89dceb9b73f2f3c5d996bf3cbb3d.exe
-
Size
96KB
-
MD5
3014298fba4398181164eaae5b96730a
-
SHA1
c82af38c0a4047fb40e1c08eba0126d621591b7f
-
SHA256
176ea76776067006d8c12a697cf9ab18883d89dceb9b73f2f3c5d996bf3cbb3d
-
SHA512
a34c71e211f6cd822f0792db58bcd383e37d552cfcd104a6e1d0014390503af42d4969beede31e2ab1891150f6fc9ca71d2dd4f2afcd74720f6d9d9b0c2f0476
-
SSDEEP
1536:pECLKU4+dwC/p0cQ7ZCAINqPDHuXnvE0oK1yyGCq2iW7zu:pJLrp0cQ7QAINqPDHQncKGCHi
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-