General
-
Target
4feaa17c9b4a297a1fd51843a7f514d99c749a19bf46ab2968b48c6ccbd1d327.exe
-
Size
80KB
-
Sample
241229-crgf2ayrev
-
MD5
3840cfa13afb95c493fc98d766946229
-
SHA1
745322beeaaf28197f3949b5ee30929f827177e1
-
SHA256
4feaa17c9b4a297a1fd51843a7f514d99c749a19bf46ab2968b48c6ccbd1d327
-
SHA512
3b51d82d1d2d2cbd2b49f638d807cc677fdb2a723b835872ac270dd0cb54cdef155ad4f8181618c7ecadb7d0f9d1abfa79332d32f0da1e0495ccbfe41e1f8c59
-
SSDEEP
1536:RfnLq01weW5yX3jFxv49Nu4GhQ6dGCq2iW7z:Y3ysTGhQiGCH
Static task
static1
Behavioral task
behavioral1
Sample
4feaa17c9b4a297a1fd51843a7f514d99c749a19bf46ab2968b48c6ccbd1d327.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
4feaa17c9b4a297a1fd51843a7f514d99c749a19bf46ab2968b48c6ccbd1d327.exe
-
Size
80KB
-
MD5
3840cfa13afb95c493fc98d766946229
-
SHA1
745322beeaaf28197f3949b5ee30929f827177e1
-
SHA256
4feaa17c9b4a297a1fd51843a7f514d99c749a19bf46ab2968b48c6ccbd1d327
-
SHA512
3b51d82d1d2d2cbd2b49f638d807cc677fdb2a723b835872ac270dd0cb54cdef155ad4f8181618c7ecadb7d0f9d1abfa79332d32f0da1e0495ccbfe41e1f8c59
-
SSDEEP
1536:RfnLq01weW5yX3jFxv49Nu4GhQ6dGCq2iW7z:Y3ysTGhQiGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-