General
-
Target
2a72afe6eb783cf0b9bcea82b6e4fa87ba8e6d94a11908e60dee87517446224e
-
Size
141KB
-
Sample
241220-k9df4atrhz
-
MD5
4dae1ddd256a815242b9f6d6f8c8ddec
-
SHA1
fe4c65aea8d7da1ad89213f7cbeecaa909436825
-
SHA256
2a72afe6eb783cf0b9bcea82b6e4fa87ba8e6d94a11908e60dee87517446224e
-
SHA512
64b66c837050d1ccaa92e3ccf3083b0754bf0c039941f91e09dfef5765a6d006d52512d2bf05e135b13b9c26a267e519d6b203e88a5313aa5d6926143c1c64e7
-
SSDEEP
3072:pc/QPqpDnKYSO40L58FvumU9aDtxG12X85cXaGCH:IQPq1nKLOxCM4A2Xvr
Static task
static1
Behavioral task
behavioral1
Sample
2a72afe6eb783cf0b9bcea82b6e4fa87ba8e6d94a11908e60dee87517446224e.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2a72afe6eb783cf0b9bcea82b6e4fa87ba8e6d94a11908e60dee87517446224e
-
Size
141KB
-
MD5
4dae1ddd256a815242b9f6d6f8c8ddec
-
SHA1
fe4c65aea8d7da1ad89213f7cbeecaa909436825
-
SHA256
2a72afe6eb783cf0b9bcea82b6e4fa87ba8e6d94a11908e60dee87517446224e
-
SHA512
64b66c837050d1ccaa92e3ccf3083b0754bf0c039941f91e09dfef5765a6d006d52512d2bf05e135b13b9c26a267e519d6b203e88a5313aa5d6926143c1c64e7
-
SSDEEP
3072:pc/QPqpDnKYSO40L58FvumU9aDtxG12X85cXaGCH:IQPq1nKLOxCM4A2Xvr
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-