General
-
Target
c08f9062592ffe83ffd259e6701748f9b2cd735cdff079c2a6231402cf4ea0e2
-
Size
1.7MB
-
Sample
250211-lsf2bssnek
-
MD5
f6ff1a3c10c0ea4619aedaa9863f8922
-
SHA1
16d4a85de3e561273e91496d166f1512bc15dddd
-
SHA256
c08f9062592ffe83ffd259e6701748f9b2cd735cdff079c2a6231402cf4ea0e2
-
SHA512
5b8ac5b939f4892bc51d0e9556dee1faeb50d3b9dbd94d5f61760e670ca78de294b673edbcf78870eeba2593280a29a1f26ccd4e68de895743a99eedf5497dad
-
SSDEEP
24576:Ckj+rIlGHibOR0UM7y8r1kJIhqEI8+2HCEToyD4Echprrm0lwE13/TQcKbWh:CkqrfiLBjE98T74EcajK/T/KbW
Static task
static1
Behavioral task
behavioral1
Sample
c08f9062592ffe83ffd259e6701748f9b2cd735cdff079c2a6231402cf4ea0e2.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
c08f9062592ffe83ffd259e6701748f9b2cd735cdff079c2a6231402cf4ea0e2
-
Size
1.7MB
-
MD5
f6ff1a3c10c0ea4619aedaa9863f8922
-
SHA1
16d4a85de3e561273e91496d166f1512bc15dddd
-
SHA256
c08f9062592ffe83ffd259e6701748f9b2cd735cdff079c2a6231402cf4ea0e2
-
SHA512
5b8ac5b939f4892bc51d0e9556dee1faeb50d3b9dbd94d5f61760e670ca78de294b673edbcf78870eeba2593280a29a1f26ccd4e68de895743a99eedf5497dad
-
SSDEEP
24576:Ckj+rIlGHibOR0UM7y8r1kJIhqEI8+2HCEToyD4Echprrm0lwE13/TQcKbWh:CkqrfiLBjE98T74EcajK/T/KbW
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-