General
-
Target
8a2be8b987ef5bfa48ebadd552e7ee55c7910fd805abc38773a98a330de61e1d
-
Size
12.0MB
-
Sample
241228-we93csznax
-
MD5
00781601407e4d52723f37b8a720b4bd
-
SHA1
3416c27ca9af798f84e6994f0d8a54896cb256d6
-
SHA256
8a2be8b987ef5bfa48ebadd552e7ee55c7910fd805abc38773a98a330de61e1d
-
SHA512
4fa965e021159ea3fb805bc3a12de682d002f4cb3d0ca42b7c6cdc97d722a030c0c7e26cc65a19011fb2fc470a8a7ae53cd77472b448e91dab0fa310fbc37951
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zOFTCTMqQ:s/KU9/pyJx9Y5ela0T
Static task
static1
Behavioral task
behavioral1
Sample
8a2be8b987ef5bfa48ebadd552e7ee55c7910fd805abc38773a98a330de61e1d.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
8a2be8b987ef5bfa48ebadd552e7ee55c7910fd805abc38773a98a330de61e1d
-
Size
12.0MB
-
MD5
00781601407e4d52723f37b8a720b4bd
-
SHA1
3416c27ca9af798f84e6994f0d8a54896cb256d6
-
SHA256
8a2be8b987ef5bfa48ebadd552e7ee55c7910fd805abc38773a98a330de61e1d
-
SHA512
4fa965e021159ea3fb805bc3a12de682d002f4cb3d0ca42b7c6cdc97d722a030c0c7e26cc65a19011fb2fc470a8a7ae53cd77472b448e91dab0fa310fbc37951
-
SSDEEP
49152:s/KE1ld3/wAyJxVZp2bnbJ5eA+zOFTCTMqQ:s/KU9/pyJx9Y5ela0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-