General
-
Target
68cf76cdff0837b1b00f1b045db7f56f7e9ff4da461a2050c82ba692aea7e9a6
-
Size
12.0MB
-
Sample
241228-v9nxyazmet
-
MD5
754a12902504eb4984a29fdbc8066702
-
SHA1
61cd3a54febe9dca2c9fbbc5eac8925222256af1
-
SHA256
68cf76cdff0837b1b00f1b045db7f56f7e9ff4da461a2050c82ba692aea7e9a6
-
SHA512
99c9d334a79b56c82c24db0bad297e2adfbb2602e282034552985c8ba8801e31be94c97e62cde2c75f4c05775772d5a4a3163073160e0f2adab9f37ae523c8f0
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zQFTCTMqQ:s/KU9/pyJx9Y5elk0T
Static task
static1
Behavioral task
behavioral1
Sample
68cf76cdff0837b1b00f1b045db7f56f7e9ff4da461a2050c82ba692aea7e9a6.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
68cf76cdff0837b1b00f1b045db7f56f7e9ff4da461a2050c82ba692aea7e9a6
-
Size
12.0MB
-
MD5
754a12902504eb4984a29fdbc8066702
-
SHA1
61cd3a54febe9dca2c9fbbc5eac8925222256af1
-
SHA256
68cf76cdff0837b1b00f1b045db7f56f7e9ff4da461a2050c82ba692aea7e9a6
-
SHA512
99c9d334a79b56c82c24db0bad297e2adfbb2602e282034552985c8ba8801e31be94c97e62cde2c75f4c05775772d5a4a3163073160e0f2adab9f37ae523c8f0
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zQFTCTMqQ:s/KU9/pyJx9Y5elk0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-