General
- Target 74a007083fc8366bcd361eae4a33fb592140cb40af07f02ad10a9927a000c646
- Size 1.3MB
- Sample260730-erkjssbe37
- SHA256 74a007083fc8366bcd361eae4a33fb592140cb40af07f02ad10a9927a000c646
- MD5 d7da3fe050c74f761c39aeca6244a123
- SHA1 43637b4160cda8450aaadc5e778cb63601e5fd4a
- SHA512 b00b7f0123a8a92f2c30f2711ac963db9254020a8163b6220ddd6386332222c1a322749e4fd13343a6f3f555ab5f33691ea9aedadb867c5b4f8a8f798b632695
- SSDEEP 24576:bkyqjZIYvKDAawNU3/7RgKB2NvTVsp4El9TjGGjrWwnazTNGfsnBBC:bk7zOFmhK4Elz+9zTIcB
- TLSH T15A659EC0E3D7A0F5D4D514B881EAB33B8A352B290315DEE777C46EA2DE24BD16D3418A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
74a007083fc8366bcd361eae4a33fb592140cb40af07f02ad10a9927a000c646.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 74a007083fc8366bcd361eae4a33fb592140cb40af07f02ad10a9927a000c646
- Size 1.3MB
- SHA256 74a007083fc8366bcd361eae4a33fb592140cb40af07f02ad10a9927a000c646
- MD5 d7da3fe050c74f761c39aeca6244a123
- SHA1 43637b4160cda8450aaadc5e778cb63601e5fd4a
- SHA512 b00b7f0123a8a92f2c30f2711ac963db9254020a8163b6220ddd6386332222c1a322749e4fd13343a6f3f555ab5f33691ea9aedadb867c5b4f8a8f798b632695
- SSDEEP 24576:bkyqjZIYvKDAawNU3/7RgKB2NvTVsp4El9TjGGjrWwnazTNGfsnBBC:bk7zOFmhK4Elz+9zTIcB
- TLSH T15A659EC0E3D7A0F5D4D514B881EAB33B8A352B290315DEE777C46EA2DE24BD16D3418A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE