General
-
Target
e548bbe7c3646eee409ba30466ecf5ed75c74699808fa98718d713709962062a
-
Size
12.0MB
-
Sample
241225-2q17gs1lbp
-
MD5
d2f051fd1240fce1abc7eca751a4799e
-
SHA1
692b8434d3ec483d722e27bfba0b3178a7da4e2e
-
SHA256
e548bbe7c3646eee409ba30466ecf5ed75c74699808fa98718d713709962062a
-
SHA512
f8be5979a2ec5e50872f884250f472a7e34715bb7f3800267e68f188bd39347ab166cfc62756e540a64ca194f1ca68c91e63506d46663878d77eea3481b3a857
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zCFTCTMqQ:s/KU9/pyJx9Y5ele0T
Static task
static1
Behavioral task
behavioral1
Sample
e548bbe7c3646eee409ba30466ecf5ed75c74699808fa98718d713709962062a.exe
Resource
win7-20240729-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
e548bbe7c3646eee409ba30466ecf5ed75c74699808fa98718d713709962062a
-
Size
12.0MB
-
MD5
d2f051fd1240fce1abc7eca751a4799e
-
SHA1
692b8434d3ec483d722e27bfba0b3178a7da4e2e
-
SHA256
e548bbe7c3646eee409ba30466ecf5ed75c74699808fa98718d713709962062a
-
SHA512
f8be5979a2ec5e50872f884250f472a7e34715bb7f3800267e68f188bd39347ab166cfc62756e540a64ca194f1ca68c91e63506d46663878d77eea3481b3a857
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zCFTCTMqQ:s/KU9/pyJx9Y5ele0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-