General
-
Target
b3ef8b8d3bf02da4f2d7338f3f0e53261376883e4a1f9dc97f79be7dd9d59535.exe
-
Size
96KB
-
Sample
250116-c44r4axmet
-
MD5
e02b739deb3c2c69e74b0e162752be8b
-
SHA1
6f6f6af5744013e40022665138c8f8b590f84aa9
-
SHA256
b3ef8b8d3bf02da4f2d7338f3f0e53261376883e4a1f9dc97f79be7dd9d59535
-
SHA512
e73ded6500e9b3395f9643da379a6186079dcd96654d7b5de0867a7daf5acd32cbf8b46e41262b5fb805fc7fd073462eef7eef8479ad5e73a867bcfc68ee601a
-
SSDEEP
1536:MqPjvlpp/06w6Px9+3cu9V+gKf8GCq2iW7z+:MqPL1/7w6ZAs+VBKkGCHS
Static task
static1
Behavioral task
behavioral1
Sample
b3ef8b8d3bf02da4f2d7338f3f0e53261376883e4a1f9dc97f79be7dd9d59535.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
b3ef8b8d3bf02da4f2d7338f3f0e53261376883e4a1f9dc97f79be7dd9d59535.exe
-
Size
96KB
-
MD5
e02b739deb3c2c69e74b0e162752be8b
-
SHA1
6f6f6af5744013e40022665138c8f8b590f84aa9
-
SHA256
b3ef8b8d3bf02da4f2d7338f3f0e53261376883e4a1f9dc97f79be7dd9d59535
-
SHA512
e73ded6500e9b3395f9643da379a6186079dcd96654d7b5de0867a7daf5acd32cbf8b46e41262b5fb805fc7fd073462eef7eef8479ad5e73a867bcfc68ee601a
-
SSDEEP
1536:MqPjvlpp/06w6Px9+3cu9V+gKf8GCq2iW7z+:MqPL1/7w6ZAs+VBKkGCHS
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-