General
-
Target
e4743ea07634960670fee23347315f4ecfeffe902eb51a86598cc296dc0e2348
-
Size
12.0MB
-
Sample
241225-1j13gayqen
-
MD5
a7134459d2f7c6822fd6c364114062a1
-
SHA1
d352125ee889ecad86ef4620ff5a48da17cbd29a
-
SHA256
e4743ea07634960670fee23347315f4ecfeffe902eb51a86598cc296dc0e2348
-
SHA512
3c6c2e0a94dc7cbfba60ec268c44c19dde71f9d883b9acbc3b319e0e5925eb13ecda34403201dd64f518bab7f23896fafe122a6d5711ffb690d39fdf1cd1f4bb
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zaFTCTMqQ:s/KU9/pyJx9Y5el20T
Static task
static1
Behavioral task
behavioral1
Sample
e4743ea07634960670fee23347315f4ecfeffe902eb51a86598cc296dc0e2348.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
e4743ea07634960670fee23347315f4ecfeffe902eb51a86598cc296dc0e2348
-
Size
12.0MB
-
MD5
a7134459d2f7c6822fd6c364114062a1
-
SHA1
d352125ee889ecad86ef4620ff5a48da17cbd29a
-
SHA256
e4743ea07634960670fee23347315f4ecfeffe902eb51a86598cc296dc0e2348
-
SHA512
3c6c2e0a94dc7cbfba60ec268c44c19dde71f9d883b9acbc3b319e0e5925eb13ecda34403201dd64f518bab7f23896fafe122a6d5711ffb690d39fdf1cd1f4bb
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zaFTCTMqQ:s/KU9/pyJx9Y5el20T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-