General
-
Target
2025-04-12_b1d04c80014757d302063fc653509558_elex_karagany_mafia_rhadamanthys_wapomi
-
Size
103KB
-
Sample
250412-wqq4mayrv9
-
MD5
b1d04c80014757d302063fc653509558
-
SHA1
004447d6a6e9dd5e31f46bd9e7c05a5f439291cf
-
SHA256
ff33f02a8b559a0cb07bdf3fa8fd4ff79a122dfb0dbad270a8c61413264c3618
-
SHA512
f7c33be0671a6ad17b5d6e4018149f5b57bd47a7e21dacdd8ebf3c99f7565e50cc8ab5a4b84826e246b320b83fd8222cdd9400830265f2ad2cbbd2826906ce15
-
SSDEEP
1536:m+yH60qqTARown0F9tTcSJKr4/HIapiu5wpR9YHE4GCq2iW7z:m/NkownOvKAHIapiewpR9YHxGCH
Static task
static1
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-04-12_b1d04c80014757d302063fc653509558_elex_karagany_mafia_rhadamanthys_wapomi
-
Size
103KB
-
MD5
b1d04c80014757d302063fc653509558
-
SHA1
004447d6a6e9dd5e31f46bd9e7c05a5f439291cf
-
SHA256
ff33f02a8b559a0cb07bdf3fa8fd4ff79a122dfb0dbad270a8c61413264c3618
-
SHA512
f7c33be0671a6ad17b5d6e4018149f5b57bd47a7e21dacdd8ebf3c99f7565e50cc8ab5a4b84826e246b320b83fd8222cdd9400830265f2ad2cbbd2826906ce15
-
SSDEEP
1536:m+yH60qqTARown0F9tTcSJKr4/HIapiu5wpR9YHE4GCq2iW7z:m/NkownOvKAHIapiewpR9YHxGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-