General
-
Target
3e7c52e531e66542cd03f7d7fea8320eed74b56072558f307cf558ff19cebc9d.exe
-
Size
80KB
-
Sample
250124-cbq1javrcl
-
MD5
a9d7e97c855ae0dea86b3a507bb6cda4
-
SHA1
47a38a325937b477ad4153fe01979f51e62db286
-
SHA256
3e7c52e531e66542cd03f7d7fea8320eed74b56072558f307cf558ff19cebc9d
-
SHA512
b3ed2ba206161e72ebf69ef4ee7b290a66f478116babdd21e5e78e7eb6e9ed4c95d613ec972bd4cad3bdc26b7e72213a3654a900f4754b971db8bfe6fdc4db0c
-
SSDEEP
1536:RfnLq01weW5yX3jFxv49Nu4GhQBqGCq2iW7zq:Y3ysTGhQMGCHm
Static task
static1
Behavioral task
behavioral1
Sample
3e7c52e531e66542cd03f7d7fea8320eed74b56072558f307cf558ff19cebc9d.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
3e7c52e531e66542cd03f7d7fea8320eed74b56072558f307cf558ff19cebc9d.exe
-
Size
80KB
-
MD5
a9d7e97c855ae0dea86b3a507bb6cda4
-
SHA1
47a38a325937b477ad4153fe01979f51e62db286
-
SHA256
3e7c52e531e66542cd03f7d7fea8320eed74b56072558f307cf558ff19cebc9d
-
SHA512
b3ed2ba206161e72ebf69ef4ee7b290a66f478116babdd21e5e78e7eb6e9ed4c95d613ec972bd4cad3bdc26b7e72213a3654a900f4754b971db8bfe6fdc4db0c
-
SSDEEP
1536:RfnLq01weW5yX3jFxv49Nu4GhQBqGCq2iW7zq:Y3ysTGhQMGCHm
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-