General
-
Target
56a5ec1654afb357d3533ae9cfa88c4323c4c90a726665ed89a2372edfc31e8f
-
Size
12.0MB
-
Sample
241225-2pc39s1kgq
-
MD5
5080c023f108d9e70b17efbfd9cc6033
-
SHA1
2ef9c5a782a6ad3388dde14ee1c3195d0d90a6b2
-
SHA256
56a5ec1654afb357d3533ae9cfa88c4323c4c90a726665ed89a2372edfc31e8f
-
SHA512
73097fd168d4d5f5e39d9609430004ca35a8af2ca5aa488dd90c4fad0211c475a706a966f202fdde2ab505c24c783acf73741ca3c2f689a773d2027cfd5884fc
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zrbQyiVoFTCTMqQ:s/KU9/pyJx9Y5elB0T
Static task
static1
Behavioral task
behavioral1
Sample
56a5ec1654afb357d3533ae9cfa88c4323c4c90a726665ed89a2372edfc31e8f.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
56a5ec1654afb357d3533ae9cfa88c4323c4c90a726665ed89a2372edfc31e8f
-
Size
12.0MB
-
MD5
5080c023f108d9e70b17efbfd9cc6033
-
SHA1
2ef9c5a782a6ad3388dde14ee1c3195d0d90a6b2
-
SHA256
56a5ec1654afb357d3533ae9cfa88c4323c4c90a726665ed89a2372edfc31e8f
-
SHA512
73097fd168d4d5f5e39d9609430004ca35a8af2ca5aa488dd90c4fad0211c475a706a966f202fdde2ab505c24c783acf73741ca3c2f689a773d2027cfd5884fc
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zrbQyiVoFTCTMqQ:s/KU9/pyJx9Y5elB0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-