General
-
Target
a73c19d8a6dd9a19b7dd3e9eba088aac43e70a4bc3627506ab9aeb441e3f5d9c
-
Size
12.0MB
-
Sample
241225-2pm88szqfy
-
MD5
086c6bb936a47c41a76eb567b4892b6e
-
SHA1
631e9ae1343b7ca445100bdb56a81ae2802662bd
-
SHA256
a73c19d8a6dd9a19b7dd3e9eba088aac43e70a4bc3627506ab9aeb441e3f5d9c
-
SHA512
4b2699980a251c9aca7a490e498ff3035e479cb0b2971081414296e10a79e4e489481550bb57569c999bb5cdd00e1bcfa253eaac1bf50e5aa38600f23c1c6811
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zFFTCTMqQ:s/KU9/pyJx9Y5elR0T
Static task
static1
Behavioral task
behavioral1
Sample
a73c19d8a6dd9a19b7dd3e9eba088aac43e70a4bc3627506ab9aeb441e3f5d9c.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
a73c19d8a6dd9a19b7dd3e9eba088aac43e70a4bc3627506ab9aeb441e3f5d9c
-
Size
12.0MB
-
MD5
086c6bb936a47c41a76eb567b4892b6e
-
SHA1
631e9ae1343b7ca445100bdb56a81ae2802662bd
-
SHA256
a73c19d8a6dd9a19b7dd3e9eba088aac43e70a4bc3627506ab9aeb441e3f5d9c
-
SHA512
4b2699980a251c9aca7a490e498ff3035e479cb0b2971081414296e10a79e4e489481550bb57569c999bb5cdd00e1bcfa253eaac1bf50e5aa38600f23c1c6811
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zFFTCTMqQ:s/KU9/pyJx9Y5elR0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-