General
-
Target
2024-11-27_fb744dbba490f96e0338688b384493b2_smoke-loader_wapomi
-
Size
80KB
-
Sample
241127-r5l11axphv
-
MD5
fb744dbba490f96e0338688b384493b2
-
SHA1
47ab4d9dae4e5c54aea7dd2a9c5e852ffdc09521
-
SHA256
0a97fef10662196392ebfca1cffe92b8cf80fb4e7b82d1e51e0ffa17ca11044b
-
SHA512
c25efa4c56aa1ced50d39b5db96f37c687753f30e60594a59b65e69c43a83c38fcf922e8357b0119177a56d4ba13a86cf62d484f5660a1a746208921799bcacd
-
SSDEEP
1536:Yg/6/tM8NXDjPX0QWlfGMckTQJ6GCq2iW7z:Hk3U8kTQIGCH
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-27_fb744dbba490f96e0338688b384493b2_smoke-loader_wapomi.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2024-11-27_fb744dbba490f96e0338688b384493b2_smoke-loader_wapomi
-
Size
80KB
-
MD5
fb744dbba490f96e0338688b384493b2
-
SHA1
47ab4d9dae4e5c54aea7dd2a9c5e852ffdc09521
-
SHA256
0a97fef10662196392ebfca1cffe92b8cf80fb4e7b82d1e51e0ffa17ca11044b
-
SHA512
c25efa4c56aa1ced50d39b5db96f37c687753f30e60594a59b65e69c43a83c38fcf922e8357b0119177a56d4ba13a86cf62d484f5660a1a746208921799bcacd
-
SSDEEP
1536:Yg/6/tM8NXDjPX0QWlfGMckTQJ6GCq2iW7z:Hk3U8kTQIGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-