General
-
Target
0111e81fe3c0a53071fbd5be5efcf26ff06207b398b0b2a7b5a4a74c24b8442f.exe
-
Size
64KB
-
Sample
250113-enf27sxndm
-
MD5
1e45cce61f2c6eea0f6155bfc6de4e30
-
SHA1
d840b0d1a839aedd38eb7c0bf5a05a035b576da5
-
SHA256
0111e81fe3c0a53071fbd5be5efcf26ff06207b398b0b2a7b5a4a74c24b8442f
-
SHA512
1c340791cdd564b8b561df195beaf97188719a2667e8336e8e606102a014717729dfeafaa1ed7edcbd634c38993d7bc0fee57f85f2def3cc51d182828f9e82f6
-
SSDEEP
768:YgoxKForThXdJjuvEwrlhpwx6E4eKAK7rEeQGPL4vzZq2o9W7GsxBbPre:BlFopNJSvu6E475UlGCq2iW7zK
Static task
static1
Behavioral task
behavioral1
Sample
0111e81fe3c0a53071fbd5be5efcf26ff06207b398b0b2a7b5a4a74c24b8442f.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
0111e81fe3c0a53071fbd5be5efcf26ff06207b398b0b2a7b5a4a74c24b8442f.exe
-
Size
64KB
-
MD5
1e45cce61f2c6eea0f6155bfc6de4e30
-
SHA1
d840b0d1a839aedd38eb7c0bf5a05a035b576da5
-
SHA256
0111e81fe3c0a53071fbd5be5efcf26ff06207b398b0b2a7b5a4a74c24b8442f
-
SHA512
1c340791cdd564b8b561df195beaf97188719a2667e8336e8e606102a014717729dfeafaa1ed7edcbd634c38993d7bc0fee57f85f2def3cc51d182828f9e82f6
-
SSDEEP
768:YgoxKForThXdJjuvEwrlhpwx6E4eKAK7rEeQGPL4vzZq2o9W7GsxBbPre:BlFopNJSvu6E475UlGCq2iW7zK
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-