General
-
Target
86ff6e676d7f9153f193fdcb967074ca5cb4a5cf41901088faba03e2765a552a
-
Size
1.1MB
-
Sample
250106-v67wmsvlfq
-
MD5
57050c15ea172306c5306829480bcfe7
-
SHA1
0235890e55c39ab040613eed2e4457f3b058dad9
-
SHA256
86ff6e676d7f9153f193fdcb967074ca5cb4a5cf41901088faba03e2765a552a
-
SHA512
a40186015486fcca4dad5d614c808d9d2ca31c767d3330966760030fc8cd9e15194fb61c70344fe7f1cc8101128300df2db5ceff82624e8ee9731bed6730b9a5
-
SSDEEP
24576:R7S8lBHSSIh+lfMZqX9OAE0ie0Kb2AL8kZ7:dSaB4+ZN55L8
Static task
static1
Behavioral task
behavioral1
Sample
86ff6e676d7f9153f193fdcb967074ca5cb4a5cf41901088faba03e2765a552a.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
86ff6e676d7f9153f193fdcb967074ca5cb4a5cf41901088faba03e2765a552a
-
Size
1.1MB
-
MD5
57050c15ea172306c5306829480bcfe7
-
SHA1
0235890e55c39ab040613eed2e4457f3b058dad9
-
SHA256
86ff6e676d7f9153f193fdcb967074ca5cb4a5cf41901088faba03e2765a552a
-
SHA512
a40186015486fcca4dad5d614c808d9d2ca31c767d3330966760030fc8cd9e15194fb61c70344fe7f1cc8101128300df2db5ceff82624e8ee9731bed6730b9a5
-
SSDEEP
24576:R7S8lBHSSIh+lfMZqX9OAE0ie0Kb2AL8kZ7:dSaB4+ZN55L8
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-