General
-
Target
0f0aba6530febb058a5dd094a8fa8ccf9883fbbbde1e613d7f8086c9fd976846
-
Size
12.0MB
-
Sample
241225-1j3lasyqer
-
MD5
3aa904f3861f093a85fab467898f0126
-
SHA1
a75c9224e753dd502fabf910aff031993e46eb64
-
SHA256
0f0aba6530febb058a5dd094a8fa8ccf9883fbbbde1e613d7f8086c9fd976846
-
SHA512
feb5c6d031952ebdbbc8d03dd232dd37130fcf4d461b2973ce86880912844857414ed262bebec54e105625036b8f89b85429c9ed18f2545f4b5ef69a2bca0092
-
SSDEEP
49152:ug17vyyo6chV9wo4CrxdEOtBT8v5vFYy1HTJsZ:ugBLo6EV9wo4of8v5vmYls
Static task
static1
Behavioral task
behavioral1
Sample
0f0aba6530febb058a5dd094a8fa8ccf9883fbbbde1e613d7f8086c9fd976846.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
0f0aba6530febb058a5dd094a8fa8ccf9883fbbbde1e613d7f8086c9fd976846
-
Size
12.0MB
-
MD5
3aa904f3861f093a85fab467898f0126
-
SHA1
a75c9224e753dd502fabf910aff031993e46eb64
-
SHA256
0f0aba6530febb058a5dd094a8fa8ccf9883fbbbde1e613d7f8086c9fd976846
-
SHA512
feb5c6d031952ebdbbc8d03dd232dd37130fcf4d461b2973ce86880912844857414ed262bebec54e105625036b8f89b85429c9ed18f2545f4b5ef69a2bca0092
-
SSDEEP
49152:ug17vyyo6chV9wo4CrxdEOtBT8v5vFYy1HTJsZ:ugBLo6EV9wo4of8v5vmYls
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-