General
- Target 4d55ebfd46b20243caf5ba9275d7bceae15a6b882a46609c1574ae54143276cb
- Size 1.1MB
- Sample260812-tdfe9abk6v
- SHA256 4d55ebfd46b20243caf5ba9275d7bceae15a6b882a46609c1574ae54143276cb
- MD5 41755e568926760488f58682e5ac8194
- SHA1 3651b784a1780b85ebf86e6c0f4236b3faef0dbf
- SHA512 1fa72af6bd80cd86ab67ee2d48cc8ea9464ad83b564167a34a7acbda6e3b1ba5e5ed47f15df2b2f319ba208a34d1758c7b860cfa96b5135c484f2e8281cc9abc
- SSDEEP 24576:SwrD4I9VBhafxnshRC/XyW8FR+Mp5AepTsrgNOaQVD+jzF1TKmx2DxY:Sw34shW/MPHpwrMp1TKW2D
- TLSH T1B7458C70FA46C4B2D69110B094BEEBBF583D6F594B3184C7D3CC3DA8A9705C1277A68A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4d55ebfd46b20243caf5ba9275d7bceae15a6b882a46609c1574ae54143276cb.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 4d55ebfd46b20243caf5ba9275d7bceae15a6b882a46609c1574ae54143276cb
- Size 1.1MB
- SHA256 4d55ebfd46b20243caf5ba9275d7bceae15a6b882a46609c1574ae54143276cb
- MD5 41755e568926760488f58682e5ac8194
- SHA1 3651b784a1780b85ebf86e6c0f4236b3faef0dbf
- SHA512 1fa72af6bd80cd86ab67ee2d48cc8ea9464ad83b564167a34a7acbda6e3b1ba5e5ed47f15df2b2f319ba208a34d1758c7b860cfa96b5135c484f2e8281cc9abc
- SSDEEP 24576:SwrD4I9VBhafxnshRC/XyW8FR+Mp5AepTsrgNOaQVD+jzF1TKmx2DxY:Sw34shW/MPHpwrMp1TKW2D
- TLSH T1B7458C70FA46C4B2D69110B094BEEBBF583D6F594B3184C7D3CC3DA8A9705C1277A68A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE