General
-
Target
50f5f00bf0564b1af5b7fed3c2a875ca9ccdd22f8f2627b7e629d46e02def8aaN.exe
-
Size
2.5MB
-
Sample
250104-1b2zssyjdy
-
MD5
9b892f3701af9bec0a0c8ecb0291fe50
-
SHA1
2072b60eaa35a6e7ea0b5abb75508705e92e869d
-
SHA256
50f5f00bf0564b1af5b7fed3c2a875ca9ccdd22f8f2627b7e629d46e02def8aa
-
SHA512
fe611422a9758cd4de9a34aa029c84d70d0322b3d5f188b72f6ccc2579655be0a8c16884626711f7881cf08f1b833c6990a4e7558007762cdabe235d3a64805d
-
SSDEEP
24576:gRKaPH2Z4nET7PIgOLoJNlVq4YmDWG9Dsl:g5PHe+O1LPlU
Static task
static1
Behavioral task
behavioral1
Sample
50f5f00bf0564b1af5b7fed3c2a875ca9ccdd22f8f2627b7e629d46e02def8aaN.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
50f5f00bf0564b1af5b7fed3c2a875ca9ccdd22f8f2627b7e629d46e02def8aaN.exe
-
Size
2.5MB
-
MD5
9b892f3701af9bec0a0c8ecb0291fe50
-
SHA1
2072b60eaa35a6e7ea0b5abb75508705e92e869d
-
SHA256
50f5f00bf0564b1af5b7fed3c2a875ca9ccdd22f8f2627b7e629d46e02def8aa
-
SHA512
fe611422a9758cd4de9a34aa029c84d70d0322b3d5f188b72f6ccc2579655be0a8c16884626711f7881cf08f1b833c6990a4e7558007762cdabe235d3a64805d
-
SSDEEP
24576:gRKaPH2Z4nET7PIgOLoJNlVq4YmDWG9Dsl:g5PHe+O1LPlU
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-