General
-
Target
2025-04-09_edcb2b04b83a210351a22f105814d690_amadey_avoslocker_black-basta_cobalt-strike_luca-stealer_wapomi
-
Size
606KB
-
Sample
250409-hqcpcasns5
-
MD5
edcb2b04b83a210351a22f105814d690
-
SHA1
24ed91a7cb079f5caa18ad5e38d6bd62d6768d82
-
SHA256
c4a2f6fb0bcb14a0d827a6c56e9a4dcb6cec5365ee0c96f289f926da8c448012
-
SHA512
3da73faef45f1b14be7f0e969373c8014e23cd1ed94f72b651cac0ffcadf827669418905b4d93cbeb83c572141a82798e0e9755d5a29e9876e436a8a5a28c46a
-
SSDEEP
12288:KubXcwafJcLln5QwnVWqqPIBONhxsU/E:KurP90r/xsU/E
Static task
static1
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-04-09_edcb2b04b83a210351a22f105814d690_amadey_avoslocker_black-basta_cobalt-strike_luca-stealer_wapomi
-
Size
606KB
-
MD5
edcb2b04b83a210351a22f105814d690
-
SHA1
24ed91a7cb079f5caa18ad5e38d6bd62d6768d82
-
SHA256
c4a2f6fb0bcb14a0d827a6c56e9a4dcb6cec5365ee0c96f289f926da8c448012
-
SHA512
3da73faef45f1b14be7f0e969373c8014e23cd1ed94f72b651cac0ffcadf827669418905b4d93cbeb83c572141a82798e0e9755d5a29e9876e436a8a5a28c46a
-
SSDEEP
12288:KubXcwafJcLln5QwnVWqqPIBONhxsU/E:KurP90r/xsU/E
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-