General
-
Target
de4ee4290ec899096746faef1c6a67693648d1a2636a05a94ef1198153667a37N.exe
-
Size
31KB
-
Sample
250204-vy912atpbs
-
MD5
28b6bc26274bdf8a8910159c2d645430
-
SHA1
e2957c9fb49315876696d5a83b672706347c7201
-
SHA256
de4ee4290ec899096746faef1c6a67693648d1a2636a05a94ef1198153667a37
-
SHA512
f6e866458c8b674eb8cf266548942102b5056f1467f5ce0021e071130985f98361a18e8ccb95eddc715ddca3fa3289c4226628627b63a8826baa0ab835c8742c
-
SSDEEP
768:uWQ3655Kv1X/qY1MSd6vQGPL4vzZq2o9W7GsxBbPr:uHqaNrFd6oGCq2iW7z
Static task
static1
Behavioral task
behavioral1
Sample
de4ee4290ec899096746faef1c6a67693648d1a2636a05a94ef1198153667a37N.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
de4ee4290ec899096746faef1c6a67693648d1a2636a05a94ef1198153667a37N.exe
-
Size
31KB
-
MD5
28b6bc26274bdf8a8910159c2d645430
-
SHA1
e2957c9fb49315876696d5a83b672706347c7201
-
SHA256
de4ee4290ec899096746faef1c6a67693648d1a2636a05a94ef1198153667a37
-
SHA512
f6e866458c8b674eb8cf266548942102b5056f1467f5ce0021e071130985f98361a18e8ccb95eddc715ddca3fa3289c4226628627b63a8826baa0ab835c8742c
-
SSDEEP
768:uWQ3655Kv1X/qY1MSd6vQGPL4vzZq2o9W7GsxBbPr:uHqaNrFd6oGCq2iW7z
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-