General
-
Target
cde56e97a0f8848109a5a6f4ad7421a070bdd572733c6256f2b75a3ba830f457
-
Size
124KB
-
Sample
250410-fdwkks1ygy
-
MD5
63757cc7e0a218c05fd3cfc6a16736aa
-
SHA1
19a11c0ea2144e08d105ca11f699261d0ea8537f
-
SHA256
cde56e97a0f8848109a5a6f4ad7421a070bdd572733c6256f2b75a3ba830f457
-
SHA512
a91629ee0ba7f8661096225d4f8a5769539e62c9e30c004163b0f8cf1d67d273c7116392c0998399bbbca4a0cd1e30677b59709f659d88efddac805ac5f978dd
-
SSDEEP
3072:11t7YTgCJXDiDJnmLkFlD9UCawY3MyiXHEKpUgbGCH:2cCJXkY93B8k6UZ
Static task
static1
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
cde56e97a0f8848109a5a6f4ad7421a070bdd572733c6256f2b75a3ba830f457
-
Size
124KB
-
MD5
63757cc7e0a218c05fd3cfc6a16736aa
-
SHA1
19a11c0ea2144e08d105ca11f699261d0ea8537f
-
SHA256
cde56e97a0f8848109a5a6f4ad7421a070bdd572733c6256f2b75a3ba830f457
-
SHA512
a91629ee0ba7f8661096225d4f8a5769539e62c9e30c004163b0f8cf1d67d273c7116392c0998399bbbca4a0cd1e30677b59709f659d88efddac805ac5f978dd
-
SSDEEP
3072:11t7YTgCJXDiDJnmLkFlD9UCawY3MyiXHEKpUgbGCH:2cCJXkY93B8k6UZ
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-