General
- Target b9090c730323b37898d4c126ae1a96154d49e68cd4dc1d34073d9ae9ee3d010f
- Size 905KB
- Sample260710-bmydbabx2p
- SHA256 b9090c730323b37898d4c126ae1a96154d49e68cd4dc1d34073d9ae9ee3d010f
- MD5 e4fc358c0042402658d15e6184255640
- SHA1 c690f6f9a5218fc388a1cb9716ab206f1adeb14c
- SHA512 89c4d1e22414896646d1e8c5be5a9dad93e8add2d3655ffe1379a1e78f0ccd054fd31c13759fcbbc3ce596e54d2f827cc23b5f9c348145b354e815fcf496c774
- SSDEEP 24576:+ngHKYfXTkXy0ZE1nk/MofuU+9gDlG4Gk3:AgqKIXz21nk/M0u99gDYA3
- TLSH T14D159D05E69048F9E0EAA27C9456DA39D3777C498760D34F12E4FE533FB22939D2AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b9090c730323b37898d4c126ae1a96154d49e68cd4dc1d34073d9ae9ee3d010f.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target b9090c730323b37898d4c126ae1a96154d49e68cd4dc1d34073d9ae9ee3d010f
- Size 905KB
- SHA256 b9090c730323b37898d4c126ae1a96154d49e68cd4dc1d34073d9ae9ee3d010f
- MD5 e4fc358c0042402658d15e6184255640
- SHA1 c690f6f9a5218fc388a1cb9716ab206f1adeb14c
- SHA512 89c4d1e22414896646d1e8c5be5a9dad93e8add2d3655ffe1379a1e78f0ccd054fd31c13759fcbbc3ce596e54d2f827cc23b5f9c348145b354e815fcf496c774
- SSDEEP 24576:+ngHKYfXTkXy0ZE1nk/MofuU+9gDlG4Gk3:AgqKIXz21nk/M0u99gDYA3
- TLSH T14D159D05E69048F9E0EAA27C9456DA39D3777C498760D34F12E4FE533FB22939D2AB40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE