General
-
Target
0d4accd75d6b0466394078e445b81dba6f3a4896a25108b8765f9f060301a28fN.exe
-
Size
510KB
-
Sample
241230-vnky6azrap
-
MD5
fdb2d4a65bbaa09bbbee5fdd0bcc6200
-
SHA1
072d2ae9119496092ceb3da9755a3220b1fc2092
-
SHA256
0d4accd75d6b0466394078e445b81dba6f3a4896a25108b8765f9f060301a28f
-
SHA512
5def8c479ea4e1aabd93018655b4bb71f61c0498d5a70ad74b7f3998f42d2ce2138233ede4e7cb5e6a96c007bc65fb306fbbac20a9ed5c244858f9dd929ee0a7
-
SSDEEP
12288:deO4ivVb83+hs/c8NViqI4+EiZVeRrs7ngjK8JxddvxDcMGk4J2M0T:L4Wdhs/tmV4+EjXKsgMGk4J/0T
Static task
static1
Behavioral task
behavioral1
Sample
0d4accd75d6b0466394078e445b81dba6f3a4896a25108b8765f9f060301a28fN.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
0d4accd75d6b0466394078e445b81dba6f3a4896a25108b8765f9f060301a28fN.exe
-
Size
510KB
-
MD5
fdb2d4a65bbaa09bbbee5fdd0bcc6200
-
SHA1
072d2ae9119496092ceb3da9755a3220b1fc2092
-
SHA256
0d4accd75d6b0466394078e445b81dba6f3a4896a25108b8765f9f060301a28f
-
SHA512
5def8c479ea4e1aabd93018655b4bb71f61c0498d5a70ad74b7f3998f42d2ce2138233ede4e7cb5e6a96c007bc65fb306fbbac20a9ed5c244858f9dd929ee0a7
-
SSDEEP
12288:deO4ivVb83+hs/c8NViqI4+EiZVeRrs7ngjK8JxddvxDcMGk4J2M0T:L4Wdhs/tmV4+EjXKsgMGk4J/0T
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-