General
-
Target
DaGvPt.exe
-
Size
15KB
-
Sample
250202-n837xasqfn
-
MD5
f7d21de5c4e81341eccd280c11ddcc9a
-
SHA1
d4e9ef10d7685d491583c6fa93ae5d9105d815bd
-
SHA256
4485df22c627fa0bb899d79aa6ff29bc5be1dbc3caa2b7a490809338d54b7794
-
SHA512
e4553b86b083996038bacfb979ad0b86f578f95185d8efac34a77f6cc73e491d4f70e1449bbc9eb1d62f430800c1574101b270e1cb0eeed43a83049a79b636a3
-
SSDEEP
384:IXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:gQGPL4vzZq2o9W7GsxBbPr
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
DaGvPt.exe
-
Size
15KB
-
MD5
f7d21de5c4e81341eccd280c11ddcc9a
-
SHA1
d4e9ef10d7685d491583c6fa93ae5d9105d815bd
-
SHA256
4485df22c627fa0bb899d79aa6ff29bc5be1dbc3caa2b7a490809338d54b7794
-
SHA512
e4553b86b083996038bacfb979ad0b86f578f95185d8efac34a77f6cc73e491d4f70e1449bbc9eb1d62f430800c1574101b270e1cb0eeed43a83049a79b636a3
-
SSDEEP
384:IXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:gQGPL4vzZq2o9W7GsxBbPr
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-