General
-
Target
2024-11-28_b3afe151e1d94c9a50bf550bfec4dd86_luca-stealer_smoke-loader_wapomi
-
Size
1.9MB
-
Sample
241128-bs6xmsvqbl
-
MD5
b3afe151e1d94c9a50bf550bfec4dd86
-
SHA1
3bac2109b4463e1c77ade33c65210ea5a56f7a95
-
SHA256
fcd6bba27775fac0d39c361771b90a1a938e933eb5a08e4253698f3047fe0574
-
SHA512
cc30e1bb5da5797176bb8e5ca482a52fbe00fd2a6f2dc4f2a7df74dda5b17f05026b8a931ee8997eedc36300aba5b21867ed4e1026a238ba54ee6a684f789537
-
SSDEEP
49152:ffGGCIriZKJoB+JTDGyNJr5rZDCD0PjxB0N9aYUz:ffGL4QKJoB+pDGyNJtrZ1PjxB0N9aYUz
Static task
static1
Behavioral task
behavioral1
Sample
2024-11-28_b3afe151e1d94c9a50bf550bfec4dd86_luca-stealer_smoke-loader_wapomi.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2024-11-28_b3afe151e1d94c9a50bf550bfec4dd86_luca-stealer_smoke-loader_wapomi
-
Size
1.9MB
-
MD5
b3afe151e1d94c9a50bf550bfec4dd86
-
SHA1
3bac2109b4463e1c77ade33c65210ea5a56f7a95
-
SHA256
fcd6bba27775fac0d39c361771b90a1a938e933eb5a08e4253698f3047fe0574
-
SHA512
cc30e1bb5da5797176bb8e5ca482a52fbe00fd2a6f2dc4f2a7df74dda5b17f05026b8a931ee8997eedc36300aba5b21867ed4e1026a238ba54ee6a684f789537
-
SSDEEP
49152:ffGGCIriZKJoB+JTDGyNJr5rZDCD0PjxB0N9aYUz:ffGL4QKJoB+pDGyNJtrZ1PjxB0N9aYUz
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-