General
-
Target
967497f124c5bb08cda62bdb0f12cb0444085f5f542b69cf52c4609501c8dc0a
-
Size
168KB
-
Sample
250408-cx2ddsxwfs
-
MD5
9db957e4b9bc9fb5a1b10ca21f8b46c1
-
SHA1
4275b2e6787732561b20d9cb6c5943db5c82059f
-
SHA256
967497f124c5bb08cda62bdb0f12cb0444085f5f542b69cf52c4609501c8dc0a
-
SHA512
ba09cbbef80a1dfba06f1e81cddbf1fc6df5d6b14727daba577babc45069d69718ecec5d3980eb7d8119dfff6c3064da73b98403734a13bfdb736ec4d38b5478
-
SSDEEP
3072:Wue7RUwFrbIa+74bJFYNY1kGB+P0yGCH:Wue72eIaJcNY9+Pi
Static task
static1
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
967497f124c5bb08cda62bdb0f12cb0444085f5f542b69cf52c4609501c8dc0a
-
Size
168KB
-
MD5
9db957e4b9bc9fb5a1b10ca21f8b46c1
-
SHA1
4275b2e6787732561b20d9cb6c5943db5c82059f
-
SHA256
967497f124c5bb08cda62bdb0f12cb0444085f5f542b69cf52c4609501c8dc0a
-
SHA512
ba09cbbef80a1dfba06f1e81cddbf1fc6df5d6b14727daba577babc45069d69718ecec5d3980eb7d8119dfff6c3064da73b98403734a13bfdb736ec4d38b5478
-
SSDEEP
3072:Wue7RUwFrbIa+74bJFYNY1kGB+P0yGCH:Wue72eIaJcNY9+Pi
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-