General
-
Target
61b92747b81b1153443a50a62b68dc151ef49e0ca8efef0fd0dcd928f65f79dcN.exe
-
Size
48KB
-
Sample
250121-1rq78stjhr
-
MD5
98dd1e68298c04be3992e0d5642f8570
-
SHA1
94f3916805e7f8bdde69df64e98833e6fae32151
-
SHA256
61b92747b81b1153443a50a62b68dc151ef49e0ca8efef0fd0dcd928f65f79dc
-
SHA512
6c90899cb89979bb9c48a9d632251abdb605ee5b592993f2e0d85aff5ce32bf713e38b76a3af8352f40dd7d20be7bacb74217aba526fda6f8882cb1e3e5532c9
-
SSDEEP
768:JesY0r63gjhJoK9QGPL4vzZq2o9W7GsxBbPr:osY0r6QroKKGCq2iW7z
Static task
static1
Behavioral task
behavioral1
Sample
61b92747b81b1153443a50a62b68dc151ef49e0ca8efef0fd0dcd928f65f79dcN.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
61b92747b81b1153443a50a62b68dc151ef49e0ca8efef0fd0dcd928f65f79dcN.exe
-
Size
48KB
-
MD5
98dd1e68298c04be3992e0d5642f8570
-
SHA1
94f3916805e7f8bdde69df64e98833e6fae32151
-
SHA256
61b92747b81b1153443a50a62b68dc151ef49e0ca8efef0fd0dcd928f65f79dc
-
SHA512
6c90899cb89979bb9c48a9d632251abdb605ee5b592993f2e0d85aff5ce32bf713e38b76a3af8352f40dd7d20be7bacb74217aba526fda6f8882cb1e3e5532c9
-
SSDEEP
768:JesY0r63gjhJoK9QGPL4vzZq2o9W7GsxBbPr:osY0r6QroKKGCq2iW7z
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-