General
-
Target
9d64eec3ecff8689a32165502b955a466e9ba8a572e8cca8f1b669ae2b10b535
-
Size
12.0MB
-
Sample
241228-wcvjwszmhw
-
MD5
962ed0458f50bbed965b64bea56eb7cd
-
SHA1
d5dea36f823ff16bd47692d425681e62520767f2
-
SHA256
9d64eec3ecff8689a32165502b955a466e9ba8a572e8cca8f1b669ae2b10b535
-
SHA512
9440ac8b648f0ce3f042965fa3b17dad89a124e234f32a9e0f666ab7cc824c8852aa15d81af843a2413198c55957e2f9fb369e95044479be34dc51a049c4567b
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zlFTCTMqQ:s/KU9/pyJx9Y5elZ0T
Static task
static1
Behavioral task
behavioral1
Sample
9d64eec3ecff8689a32165502b955a466e9ba8a572e8cca8f1b669ae2b10b535.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
9d64eec3ecff8689a32165502b955a466e9ba8a572e8cca8f1b669ae2b10b535
-
Size
12.0MB
-
MD5
962ed0458f50bbed965b64bea56eb7cd
-
SHA1
d5dea36f823ff16bd47692d425681e62520767f2
-
SHA256
9d64eec3ecff8689a32165502b955a466e9ba8a572e8cca8f1b669ae2b10b535
-
SHA512
9440ac8b648f0ce3f042965fa3b17dad89a124e234f32a9e0f666ab7cc824c8852aa15d81af843a2413198c55957e2f9fb369e95044479be34dc51a049c4567b
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zlFTCTMqQ:s/KU9/pyJx9Y5elZ0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-