General
-
Target
9da687685585b406e286860db378305186c3636505716f02ca4233a1cd86b201
-
Size
12.0MB
-
Sample
241225-2qzzeszrat
-
MD5
e3bc876fb0b8146bc753a446d2747df1
-
SHA1
57d8276e6f354ee0ae4dafc11fcd9243c94b15a4
-
SHA256
9da687685585b406e286860db378305186c3636505716f02ca4233a1cd86b201
-
SHA512
53ccf9db48d77c65632dfb866bee726366aed865f487a445c9a5426690607476cd0526256b59a4f9e030a01225e984f6f1aab219f34ce362a513f5f783e195e6
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zwFTCTMqQ:s/KU9/pyJx9Y5elc0T
Static task
static1
Behavioral task
behavioral1
Sample
9da687685585b406e286860db378305186c3636505716f02ca4233a1cd86b201.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
9da687685585b406e286860db378305186c3636505716f02ca4233a1cd86b201
-
Size
12.0MB
-
MD5
e3bc876fb0b8146bc753a446d2747df1
-
SHA1
57d8276e6f354ee0ae4dafc11fcd9243c94b15a4
-
SHA256
9da687685585b406e286860db378305186c3636505716f02ca4233a1cd86b201
-
SHA512
53ccf9db48d77c65632dfb866bee726366aed865f487a445c9a5426690607476cd0526256b59a4f9e030a01225e984f6f1aab219f34ce362a513f5f783e195e6
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zwFTCTMqQ:s/KU9/pyJx9Y5elc0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-