General
-
Target
bfa2f162df38f24ab650339122304b46eab27c81ef66e7d9585fcae6f82d7cb8
-
Size
6.7MB
-
Sample
250124-xggdhatqcj
-
MD5
f03b14e62c74d3b050140ff9a7015f13
-
SHA1
7aa17bf3b1ae7327a63c80f77d265bbfd2a2e578
-
SHA256
bfa2f162df38f24ab650339122304b46eab27c81ef66e7d9585fcae6f82d7cb8
-
SHA512
c06bcc4f0a113d44580d71308503795d53ccdb93d86c99fde6432706f95a737dd3b0931a835cb6c5c99257d7457373f3db22cc549dc9b84876094f22ca96a600
-
SSDEEP
98304:5kaWsAYtVm8xoZV/Cypkj2JY7kXeYfmFao4PWjJ8MjY0:5kaWsAYbZawypka4lYbMJ8MjY0
Static task
static1
Behavioral task
behavioral1
Sample
bfa2f162df38f24ab650339122304b46eab27c81ef66e7d9585fcae6f82d7cb8.exe
Resource
win7-20241023-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
bfa2f162df38f24ab650339122304b46eab27c81ef66e7d9585fcae6f82d7cb8
-
Size
6.7MB
-
MD5
f03b14e62c74d3b050140ff9a7015f13
-
SHA1
7aa17bf3b1ae7327a63c80f77d265bbfd2a2e578
-
SHA256
bfa2f162df38f24ab650339122304b46eab27c81ef66e7d9585fcae6f82d7cb8
-
SHA512
c06bcc4f0a113d44580d71308503795d53ccdb93d86c99fde6432706f95a737dd3b0931a835cb6c5c99257d7457373f3db22cc549dc9b84876094f22ca96a600
-
SSDEEP
98304:5kaWsAYtVm8xoZV/Cypkj2JY7kXeYfmFao4PWjJ8MjY0:5kaWsAYbZawypka4lYbMJ8MjY0
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-