General
-
Target
97b1256771b7685dcb264ed1797272f6d22ded1c876f25b57f1983626a269749
-
Size
80KB
-
Sample
250108-flf5vsvna1
-
MD5
cd8c507ee0b2c50fec1b243a74817017
-
SHA1
6a8626380b5fc561b7d22f55e93a7523fb8b9a71
-
SHA256
97b1256771b7685dcb264ed1797272f6d22ded1c876f25b57f1983626a269749
-
SHA512
e6f84f376d285c5c8ba6c6e623e58d7ed4d9f4bbf833e050b9dee59910c863bfeef0bc0c9f3e351ed4737038cedbe774a9e98483f30a02856186058f5b3e1640
-
SSDEEP
1536:Yg/6/tM8NXDjPX0QWlfGMckTQ3BGCq2iW7z:Hk3U8kTQRGCH
Static task
static1
Behavioral task
behavioral1
Sample
97b1256771b7685dcb264ed1797272f6d22ded1c876f25b57f1983626a269749.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
97b1256771b7685dcb264ed1797272f6d22ded1c876f25b57f1983626a269749
-
Size
80KB
-
MD5
cd8c507ee0b2c50fec1b243a74817017
-
SHA1
6a8626380b5fc561b7d22f55e93a7523fb8b9a71
-
SHA256
97b1256771b7685dcb264ed1797272f6d22ded1c876f25b57f1983626a269749
-
SHA512
e6f84f376d285c5c8ba6c6e623e58d7ed4d9f4bbf833e050b9dee59910c863bfeef0bc0c9f3e351ed4737038cedbe774a9e98483f30a02856186058f5b3e1640
-
SSDEEP
1536:Yg/6/tM8NXDjPX0QWlfGMckTQ3BGCq2iW7z:Hk3U8kTQRGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-