General
-
Target
184ecb020160f3e46136307f2d35259946ee0d8da25fa10f4ec6780e620fc122
-
Size
12.0MB
-
Sample
241228-wa6t5szrfp
-
MD5
197bedbab26b6f2ca95378249a4ff28c
-
SHA1
1c04de6794fdb16dedd97879d8b468dc171d2a01
-
SHA256
184ecb020160f3e46136307f2d35259946ee0d8da25fa10f4ec6780e620fc122
-
SHA512
de14b3c653070d5a655c48d81ce6b65967a7fbf40a92fd8abad51787dafc9270d4251445a43e8c2ccc85360f1fbc86d177b97861e1c7d4bf49e66662216719ca
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zXFTCTMqQ:s/KU9/pyJx9Y5elz0T
Static task
static1
Behavioral task
behavioral1
Sample
184ecb020160f3e46136307f2d35259946ee0d8da25fa10f4ec6780e620fc122.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
184ecb020160f3e46136307f2d35259946ee0d8da25fa10f4ec6780e620fc122
-
Size
12.0MB
-
MD5
197bedbab26b6f2ca95378249a4ff28c
-
SHA1
1c04de6794fdb16dedd97879d8b468dc171d2a01
-
SHA256
184ecb020160f3e46136307f2d35259946ee0d8da25fa10f4ec6780e620fc122
-
SHA512
de14b3c653070d5a655c48d81ce6b65967a7fbf40a92fd8abad51787dafc9270d4251445a43e8c2ccc85360f1fbc86d177b97861e1c7d4bf49e66662216719ca
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zXFTCTMqQ:s/KU9/pyJx9Y5elz0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-