General
-
Target
22756fe233878a84c0349b5302bb9d8d417b3ee8d6d2a6e17202482c9d2a4afc
-
Size
3.4MB
-
Sample
250210-gd6afssjfq
-
MD5
61e5c9f2992d301d3a4c3ed2ebe76853
-
SHA1
3c393fcbe7e5f8ad3427745d4ae795d1fe7f3910
-
SHA256
22756fe233878a84c0349b5302bb9d8d417b3ee8d6d2a6e17202482c9d2a4afc
-
SHA512
ff942b5dd00e40d4ddb4d739e03c2cacdf27408480b819ad275ecc94cdb641105e2c6a60ca4aa675bf2d8fe4644e6f335d2b60289e66213ecdf0663e77906ae3
-
SSDEEP
49152:jNKGQPaSBQ0ZDa8xC50aUT50LXXBmtol6L9TX3drisVuyxfR1:BKzaSCcDI560o9TXNruwv
Static task
static1
Behavioral task
behavioral1
Sample
22756fe233878a84c0349b5302bb9d8d417b3ee8d6d2a6e17202482c9d2a4afc.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
22756fe233878a84c0349b5302bb9d8d417b3ee8d6d2a6e17202482c9d2a4afc
-
Size
3.4MB
-
MD5
61e5c9f2992d301d3a4c3ed2ebe76853
-
SHA1
3c393fcbe7e5f8ad3427745d4ae795d1fe7f3910
-
SHA256
22756fe233878a84c0349b5302bb9d8d417b3ee8d6d2a6e17202482c9d2a4afc
-
SHA512
ff942b5dd00e40d4ddb4d739e03c2cacdf27408480b819ad275ecc94cdb641105e2c6a60ca4aa675bf2d8fe4644e6f335d2b60289e66213ecdf0663e77906ae3
-
SSDEEP
49152:jNKGQPaSBQ0ZDa8xC50aUT50LXXBmtol6L9TX3drisVuyxfR1:BKzaSCcDI560o9TXNruwv
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-