General
-
Target
6f57f33b49a8bd0632f14db272e93cce739bb36a2cc4ad8ac509cb8d28daf016
-
Size
84KB
-
Sample
250117-cr2rzaynft
-
MD5
1b74e11ceb7c13eafe14cbb4e821278c
-
SHA1
9f78df54d7b820d40e2c198f783afc717f74debb
-
SHA256
6f57f33b49a8bd0632f14db272e93cce739bb36a2cc4ad8ac509cb8d28daf016
-
SHA512
59a504893439ac4cee61cc0658ae2806ac7ee23ce8acb14a682cd66b931d3c13696ddaf7e9bbded45f3548ab522c2048763558996b66ea087a7f31febe526172
-
SSDEEP
768:t03sqBPUD/WHiR9+z1v+1vhdkY7mCDN5zzANhHcz5WgQGPL4vzZq2o9W7GsxBbPr:vNDp+z121jV54sz5WrGCq2iW7z
Static task
static1
Behavioral task
behavioral1
Sample
6f57f33b49a8bd0632f14db272e93cce739bb36a2cc4ad8ac509cb8d28daf016.exe
Resource
win7-20240729-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
6f57f33b49a8bd0632f14db272e93cce739bb36a2cc4ad8ac509cb8d28daf016
-
Size
84KB
-
MD5
1b74e11ceb7c13eafe14cbb4e821278c
-
SHA1
9f78df54d7b820d40e2c198f783afc717f74debb
-
SHA256
6f57f33b49a8bd0632f14db272e93cce739bb36a2cc4ad8ac509cb8d28daf016
-
SHA512
59a504893439ac4cee61cc0658ae2806ac7ee23ce8acb14a682cd66b931d3c13696ddaf7e9bbded45f3548ab522c2048763558996b66ea087a7f31febe526172
-
SSDEEP
768:t03sqBPUD/WHiR9+z1v+1vhdkY7mCDN5zzANhHcz5WgQGPL4vzZq2o9W7GsxBbPr:vNDp+z121jV54sz5WrGCq2iW7z
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-