General
-
Target
7ccd934b6ec4b3b7d5ec7a84460f27d1c33ad8642ed3f7908ac6b7c040d29888.exe
-
Size
930KB
-
Sample
250102-a9eztatqgw
-
MD5
7b69bda4c2571cfacbf5a04837647f7e
-
SHA1
e15c3f93555ff159d209cb13f05db66e4307b250
-
SHA256
7ccd934b6ec4b3b7d5ec7a84460f27d1c33ad8642ed3f7908ac6b7c040d29888
-
SHA512
04037e60b3ecb9d6b596c06866aa611242c7a14323d9384b24c269a9beceae58e8325fcea2b9879893836eccf6ca388a237000f2077230765e5829731c977c65
-
SSDEEP
12288:hr+/U0UAQ0QkiWNlyxRCugvijhCWTJUuD6q9RIHwjMj+F8ii6JqgkYUV+I7cKRgF:hqBUAPiWNA0vijQWquD2wjqIO6lnicKY
Static task
static1
Behavioral task
behavioral1
Sample
7ccd934b6ec4b3b7d5ec7a84460f27d1c33ad8642ed3f7908ac6b7c040d29888.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
7ccd934b6ec4b3b7d5ec7a84460f27d1c33ad8642ed3f7908ac6b7c040d29888.exe
-
Size
930KB
-
MD5
7b69bda4c2571cfacbf5a04837647f7e
-
SHA1
e15c3f93555ff159d209cb13f05db66e4307b250
-
SHA256
7ccd934b6ec4b3b7d5ec7a84460f27d1c33ad8642ed3f7908ac6b7c040d29888
-
SHA512
04037e60b3ecb9d6b596c06866aa611242c7a14323d9384b24c269a9beceae58e8325fcea2b9879893836eccf6ca388a237000f2077230765e5829731c977c65
-
SSDEEP
12288:hr+/U0UAQ0QkiWNlyxRCugvijhCWTJUuD6q9RIHwjMj+F8ii6JqgkYUV+I7cKRgF:hqBUAPiWNA0vijQWquD2wjqIO6lnicKY
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-