General
-
Target
b98c41131ca7949e486084ede9cd559d59e7e44a29c5e3f7cb56a24280372bef
-
Size
12.0MB
-
Sample
241225-2nwtzszqd1
-
MD5
10f4dd56b12c3a1a89c142ddef138c8e
-
SHA1
2dc73de645ebf3f82b744c549cadfdebcd6122b8
-
SHA256
b98c41131ca7949e486084ede9cd559d59e7e44a29c5e3f7cb56a24280372bef
-
SHA512
5ebdb1d06750e64a61d03efc490858e595c4b777ad22560298b079557e55e17b351eb2e54d5d635459484fd4ee9ff7025bc955654c21214ed32eb08ad552a87e
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zGFTCTMqQ:s/KU9/pyJx9Y5elq0T
Static task
static1
Behavioral task
behavioral1
Sample
b98c41131ca7949e486084ede9cd559d59e7e44a29c5e3f7cb56a24280372bef.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
b98c41131ca7949e486084ede9cd559d59e7e44a29c5e3f7cb56a24280372bef
-
Size
12.0MB
-
MD5
10f4dd56b12c3a1a89c142ddef138c8e
-
SHA1
2dc73de645ebf3f82b744c549cadfdebcd6122b8
-
SHA256
b98c41131ca7949e486084ede9cd559d59e7e44a29c5e3f7cb56a24280372bef
-
SHA512
5ebdb1d06750e64a61d03efc490858e595c4b777ad22560298b079557e55e17b351eb2e54d5d635459484fd4ee9ff7025bc955654c21214ed32eb08ad552a87e
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zGFTCTMqQ:s/KU9/pyJx9Y5elq0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-