General
-
Target
ab2e20f7862ecacd6685fb135b15af3e918f4899bbda0118ef564e0031f0e45eN.exe
-
Size
80KB
-
Sample
250102-h3z1easpel
-
MD5
b4fe1ae691b566af4e63f99c5543e720
-
SHA1
9f36feed04788d6ebb1fe000df004d5f04aef23b
-
SHA256
ab2e20f7862ecacd6685fb135b15af3e918f4899bbda0118ef564e0031f0e45e
-
SHA512
4ade2a35146dcb650ecb57eed3dd64561024eb423892921e3bce72d73a4f18bbac51134861c2e62efb6534376ada9b159e517983621d9304bf2ca5ecdafe78ad
-
SSDEEP
1536:/JvJnBpwdaMIOOnToIfiV6pdQxSGCq2iW7z:/JvxKaCqTBfiooUGCH
Static task
static1
Behavioral task
behavioral1
Sample
ab2e20f7862ecacd6685fb135b15af3e918f4899bbda0118ef564e0031f0e45eN.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
ab2e20f7862ecacd6685fb135b15af3e918f4899bbda0118ef564e0031f0e45eN.exe
-
Size
80KB
-
MD5
b4fe1ae691b566af4e63f99c5543e720
-
SHA1
9f36feed04788d6ebb1fe000df004d5f04aef23b
-
SHA256
ab2e20f7862ecacd6685fb135b15af3e918f4899bbda0118ef564e0031f0e45e
-
SHA512
4ade2a35146dcb650ecb57eed3dd64561024eb423892921e3bce72d73a4f18bbac51134861c2e62efb6534376ada9b159e517983621d9304bf2ca5ecdafe78ad
-
SSDEEP
1536:/JvJnBpwdaMIOOnToIfiV6pdQxSGCq2iW7z:/JvxKaCqTBfiooUGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-