General
-
Target
e7010193de799aef25ff5740a820c562a47834392ba5bc6c05fa3e6cb02201f5.exe
-
Size
92KB
-
Sample
241218-enffnsslbx
-
MD5
489fb725303f1503ad9d8953e81ff873
-
SHA1
6efc6b98e822e3af60feea19345930bd7698e390
-
SHA256
e7010193de799aef25ff5740a820c562a47834392ba5bc6c05fa3e6cb02201f5
-
SHA512
15357606e5cbe57eefc11e43f19c546d70542bcf682f40347681c8c9af1020043f7842a2c2cd48534ad44632c3a5826afe2c2903df7a25e5a49badb9437cd708
-
SSDEEP
1536:i2RJ8zI+EMBreBSoeKcTZV5MuzcekgksWjcdKaDqGCq2iW7zO:i2RctSlNACW3LK1GCHC
Static task
static1
Behavioral task
behavioral1
Sample
e7010193de799aef25ff5740a820c562a47834392ba5bc6c05fa3e6cb02201f5.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
e7010193de799aef25ff5740a820c562a47834392ba5bc6c05fa3e6cb02201f5.exe
-
Size
92KB
-
MD5
489fb725303f1503ad9d8953e81ff873
-
SHA1
6efc6b98e822e3af60feea19345930bd7698e390
-
SHA256
e7010193de799aef25ff5740a820c562a47834392ba5bc6c05fa3e6cb02201f5
-
SHA512
15357606e5cbe57eefc11e43f19c546d70542bcf682f40347681c8c9af1020043f7842a2c2cd48534ad44632c3a5826afe2c2903df7a25e5a49badb9437cd708
-
SSDEEP
1536:i2RJ8zI+EMBreBSoeKcTZV5MuzcekgksWjcdKaDqGCq2iW7zO:i2RctSlNACW3LK1GCHC
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-