Skip to content
MalwareWiki

Malware

Edam

aka SECONDBEST

According to Orange Cyberdefense, Edam is written in C++ and its PDB path indicates it is called "droper_dll".

Edam, also known as SECONDBEST, is a Windows malware family.

Background

Per Orange Cyberdefense, Edam is a C++ binary whose PDB path identifies it as "droper_dll". It can gain persistence by creating a Run key named Setting App that references its own file, and it then retrieves a final-stage payload from a separate C2 via an HTTP GET request.

Source: Malpedia (Fraunhofer FKIE).