General
-
Target
f7e72ecf28742461e629ec991ea31e4cf9c1921bc9ecebee65ba4e5303a1597a.exe
-
Size
96KB
-
Sample
241231-wxedeasncx
-
MD5
22dad73d02ea4ac622202fc65b95f216
-
SHA1
c3cf1e710a14ed6932ee20d7ae90e2d831ccfe30
-
SHA256
f7e72ecf28742461e629ec991ea31e4cf9c1921bc9ecebee65ba4e5303a1597a
-
SHA512
367d8383bbbb08135abdacdb62fe8a230526037570b3111968b4a3dbcafc3f89218ce15ddefda68d1dee30f8912872e09b6bcb89f48084630ae5cc84dbb10605
-
SSDEEP
1536:MqPjvlpp/06w6Px9+3cu9V+gKbbGCq2iW7za:MqPL1/7w6ZAs+VBKXGCH2
Static task
static1
Behavioral task
behavioral1
Sample
f7e72ecf28742461e629ec991ea31e4cf9c1921bc9ecebee65ba4e5303a1597a.exe
Resource
win7-20240729-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
f7e72ecf28742461e629ec991ea31e4cf9c1921bc9ecebee65ba4e5303a1597a.exe
-
Size
96KB
-
MD5
22dad73d02ea4ac622202fc65b95f216
-
SHA1
c3cf1e710a14ed6932ee20d7ae90e2d831ccfe30
-
SHA256
f7e72ecf28742461e629ec991ea31e4cf9c1921bc9ecebee65ba4e5303a1597a
-
SHA512
367d8383bbbb08135abdacdb62fe8a230526037570b3111968b4a3dbcafc3f89218ce15ddefda68d1dee30f8912872e09b6bcb89f48084630ae5cc84dbb10605
-
SSDEEP
1536:MqPjvlpp/06w6Px9+3cu9V+gKbbGCq2iW7za:MqPL1/7w6ZAs+VBKXGCH2
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-