General
-
Target
b3650ef722cbd5c0e34901847d9cf6a5cbdd2e4e076dd28f8d831ecd772ce92f.exe
-
Size
303KB
-
Sample
250102-c97qya1qhp
-
MD5
505370698d0db4fb9b70ceb3d6b38068
-
SHA1
63504adaedb8ab737cd3ecfffe6863b4cf64ebae
-
SHA256
b3650ef722cbd5c0e34901847d9cf6a5cbdd2e4e076dd28f8d831ecd772ce92f
-
SHA512
567d8ddafff5cf187da8974f76bc41909a7605b508685a619596b3ae1524ff2b1445882873df69c713d6d94840cc3e91f399c7db56da87b3849e5375be97c964
-
SSDEEP
6144:RdZiP3k3YeDgU5nMNsDQzcmGxF1RYTc3fD8Xhwm3zdiMMKpLIn:RdZc0lp4PzanGQ3fAC2MoA
Static task
static1
Behavioral task
behavioral1
Sample
b3650ef722cbd5c0e34901847d9cf6a5cbdd2e4e076dd28f8d831ecd772ce92f.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
b3650ef722cbd5c0e34901847d9cf6a5cbdd2e4e076dd28f8d831ecd772ce92f.exe
-
Size
303KB
-
MD5
505370698d0db4fb9b70ceb3d6b38068
-
SHA1
63504adaedb8ab737cd3ecfffe6863b4cf64ebae
-
SHA256
b3650ef722cbd5c0e34901847d9cf6a5cbdd2e4e076dd28f8d831ecd772ce92f
-
SHA512
567d8ddafff5cf187da8974f76bc41909a7605b508685a619596b3ae1524ff2b1445882873df69c713d6d94840cc3e91f399c7db56da87b3849e5375be97c964
-
SSDEEP
6144:RdZiP3k3YeDgU5nMNsDQzcmGxF1RYTc3fD8Xhwm3zdiMMKpLIn:RdZc0lp4PzanGQ3fAC2MoA
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-