General
-
Target
9c196ebb24a0600cc17e44956371e2943540f5347ee163e37c53c8614abe8adf
-
Size
12.0MB
-
Sample
241225-2n771s1kgj
-
MD5
858baccfefd76496de8a3b8b710772ea
-
SHA1
599cc5785486f30211b7f19a966d20dfdc7b59a9
-
SHA256
9c196ebb24a0600cc17e44956371e2943540f5347ee163e37c53c8614abe8adf
-
SHA512
94122c1465ae6cf75828e81dceb56731b84939d850951bdae51aaed775508bb0be6250997c7f34c64a6adbef29d87a63aff55ec527ce2e39ccd31e6bc40bd346
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zyFTCTMqQ:s/KU9/pyJx9Y5elG0T
Static task
static1
Behavioral task
behavioral1
Sample
9c196ebb24a0600cc17e44956371e2943540f5347ee163e37c53c8614abe8adf.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
9c196ebb24a0600cc17e44956371e2943540f5347ee163e37c53c8614abe8adf
-
Size
12.0MB
-
MD5
858baccfefd76496de8a3b8b710772ea
-
SHA1
599cc5785486f30211b7f19a966d20dfdc7b59a9
-
SHA256
9c196ebb24a0600cc17e44956371e2943540f5347ee163e37c53c8614abe8adf
-
SHA512
94122c1465ae6cf75828e81dceb56731b84939d850951bdae51aaed775508bb0be6250997c7f34c64a6adbef29d87a63aff55ec527ce2e39ccd31e6bc40bd346
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zyFTCTMqQ:s/KU9/pyJx9Y5elG0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-