General
-
Target
6cd6bcc4434c3b07b3ef598cb2bffed628ce64f7570b6f0d0c2ba5a84f3d23f5.exe
-
Size
640KB
-
Sample
250102-eadpxs1ngt
-
MD5
5ed2a3125ba2aff42060ba2f94aa0b8b
-
SHA1
46cbf7f4dfbce1a505d7c722594bbc241f2c219e
-
SHA256
6cd6bcc4434c3b07b3ef598cb2bffed628ce64f7570b6f0d0c2ba5a84f3d23f5
-
SHA512
7f4f0024087f89d0f10d8111ae4a91d277e0fde8151eb531152e013a0c0b7355b7ca5cfb6b2d248ef1c670fec8d6c4ad3ecee74f0cd21ff45cb49d19fa216654
-
SSDEEP
12288:hJUvxKcxpJ6HL3D0jwiZcaKqqnfrjSZYqWP8Eq7tbgVv09smaMQ:U3xQDdiZcaKZYkq7tbg9X
Static task
static1
Behavioral task
behavioral1
Sample
6cd6bcc4434c3b07b3ef598cb2bffed628ce64f7570b6f0d0c2ba5a84f3d23f5.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
6cd6bcc4434c3b07b3ef598cb2bffed628ce64f7570b6f0d0c2ba5a84f3d23f5.exe
-
Size
640KB
-
MD5
5ed2a3125ba2aff42060ba2f94aa0b8b
-
SHA1
46cbf7f4dfbce1a505d7c722594bbc241f2c219e
-
SHA256
6cd6bcc4434c3b07b3ef598cb2bffed628ce64f7570b6f0d0c2ba5a84f3d23f5
-
SHA512
7f4f0024087f89d0f10d8111ae4a91d277e0fde8151eb531152e013a0c0b7355b7ca5cfb6b2d248ef1c670fec8d6c4ad3ecee74f0cd21ff45cb49d19fa216654
-
SSDEEP
12288:hJUvxKcxpJ6HL3D0jwiZcaKqqnfrjSZYqWP8Eq7tbgVv09smaMQ:U3xQDdiZcaKZYkq7tbg9X
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-