General
-
Target
69e834be4264dab45e393e63952ae3b65f4e027a5928509c013b16175a43504b.exe
-
Size
80KB
-
Sample
241229-cva4eszkem
-
MD5
7acf6527ef4bef7f7325a94c4d92c1f9
-
SHA1
8c39212f127dfe4c04b05f05b9e6759566ed207a
-
SHA256
69e834be4264dab45e393e63952ae3b65f4e027a5928509c013b16175a43504b
-
SHA512
9b44ea66ed3869c3454ec1882ca6a4d7ea8ff49a3c48908a8c90a48b1b6ca3488920b81a0d499849cdde6e1f4f43a4439bac2e96f819b8d8e626cd8c4b094b93
-
SSDEEP
1536:Yg/6/tM8NXDjPX0QWlfGMckTQlXGCq2iW7z:Hk3U8kTQRGCH
Static task
static1
Behavioral task
behavioral1
Sample
69e834be4264dab45e393e63952ae3b65f4e027a5928509c013b16175a43504b.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
69e834be4264dab45e393e63952ae3b65f4e027a5928509c013b16175a43504b.exe
-
Size
80KB
-
MD5
7acf6527ef4bef7f7325a94c4d92c1f9
-
SHA1
8c39212f127dfe4c04b05f05b9e6759566ed207a
-
SHA256
69e834be4264dab45e393e63952ae3b65f4e027a5928509c013b16175a43504b
-
SHA512
9b44ea66ed3869c3454ec1882ca6a4d7ea8ff49a3c48908a8c90a48b1b6ca3488920b81a0d499849cdde6e1f4f43a4439bac2e96f819b8d8e626cd8c4b094b93
-
SSDEEP
1536:Yg/6/tM8NXDjPX0QWlfGMckTQlXGCq2iW7z:Hk3U8kTQRGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-