General
-
Target
fac42f91a88bf2f7047a6d655ca7b0815fc4eccbc53e0215187aa36bd722e7c7
-
Size
12.0MB
-
Sample
241225-2ns34a1kfj
-
MD5
81ae568a5eeb426ff072b988c1650fba
-
SHA1
4fc0403af6b1262550dde6c0f820fcc67dc280ce
-
SHA256
fac42f91a88bf2f7047a6d655ca7b0815fc4eccbc53e0215187aa36bd722e7c7
-
SHA512
3e40d5bd71313f52fe453a59fbfbd1af8541899a30d13a5010f4477efb64d12871efe09a58ab32e1d78c8c47cb6d59e77093ee4201908c0ce80cfae6d03c7139
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+z3FTCTMqQ:s/KU9/pyJx9Y5elj0T
Static task
static1
Behavioral task
behavioral1
Sample
fac42f91a88bf2f7047a6d655ca7b0815fc4eccbc53e0215187aa36bd722e7c7.exe
Resource
win7-20240708-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
fac42f91a88bf2f7047a6d655ca7b0815fc4eccbc53e0215187aa36bd722e7c7
-
Size
12.0MB
-
MD5
81ae568a5eeb426ff072b988c1650fba
-
SHA1
4fc0403af6b1262550dde6c0f820fcc67dc280ce
-
SHA256
fac42f91a88bf2f7047a6d655ca7b0815fc4eccbc53e0215187aa36bd722e7c7
-
SHA512
3e40d5bd71313f52fe453a59fbfbd1af8541899a30d13a5010f4477efb64d12871efe09a58ab32e1d78c8c47cb6d59e77093ee4201908c0ce80cfae6d03c7139
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+z3FTCTMqQ:s/KU9/pyJx9Y5elj0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-