General
-
Target
23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154.exe
-
Size
48KB
-
Sample
250122-wq1m3aykev
-
MD5
89eb637d610c36c2245b0dcdb8073823
-
SHA1
0f22e5bc5abbe5bee574fdcc420e529625e102f8
-
SHA256
23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154
-
SHA512
ff933611a6eef68d9522ca4d3e2cbbcbb90a9b108e4642eb0db190fa7214ddad1cd888cc13292a90b93b4e7a07bb47da873b4ab10a705c055dfd04321934e7b0
-
SSDEEP
768:JesY0r63gjhJoK9QGPL4vzZq2o9W7GsxBbPru:osY0r6QroKKGCq2iW7za
Static task
static1
Behavioral task
behavioral1
Sample
23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154.exe
-
Size
48KB
-
MD5
89eb637d610c36c2245b0dcdb8073823
-
SHA1
0f22e5bc5abbe5bee574fdcc420e529625e102f8
-
SHA256
23f58968a15d4d7f8455f166e3366ca3582d67deb69df4e72eb0057d03394154
-
SHA512
ff933611a6eef68d9522ca4d3e2cbbcbb90a9b108e4642eb0db190fa7214ddad1cd888cc13292a90b93b4e7a07bb47da873b4ab10a705c055dfd04321934e7b0
-
SSDEEP
768:JesY0r63gjhJoK9QGPL4vzZq2o9W7GsxBbPru:osY0r6QroKKGCq2iW7za
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-