General
-
Target
9f35c927bdd8272de0c637020417b4516a32afa9eee12ba108671f4ecf18539a
-
Size
12.0MB
-
Sample
241225-2plqeazqfv
-
MD5
c1bae6337aba48189626fc4865eca20d
-
SHA1
07a64b4c474709445d5fbf1aad00dbffe856ceb6
-
SHA256
9f35c927bdd8272de0c637020417b4516a32afa9eee12ba108671f4ecf18539a
-
SHA512
16575b78c42fb2b73e7cd110c5e468a8ca061fd951442156f4992467d51f1c8d9f22b396890a6ad3bfbc5e17a627526f0638861619e315e1c5a018f17e799a18
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+z0FTCTMqQ:s/KU9/pyJx9Y5elQ0T
Static task
static1
Behavioral task
behavioral1
Sample
9f35c927bdd8272de0c637020417b4516a32afa9eee12ba108671f4ecf18539a.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
9f35c927bdd8272de0c637020417b4516a32afa9eee12ba108671f4ecf18539a
-
Size
12.0MB
-
MD5
c1bae6337aba48189626fc4865eca20d
-
SHA1
07a64b4c474709445d5fbf1aad00dbffe856ceb6
-
SHA256
9f35c927bdd8272de0c637020417b4516a32afa9eee12ba108671f4ecf18539a
-
SHA512
16575b78c42fb2b73e7cd110c5e468a8ca061fd951442156f4992467d51f1c8d9f22b396890a6ad3bfbc5e17a627526f0638861619e315e1c5a018f17e799a18
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+z0FTCTMqQ:s/KU9/pyJx9Y5elQ0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-