General

  • Target

    2024-11-28_b3afe151e1d94c9a50bf550bfec4dd86_luca-stealer_smoke-loader_wapomi

  • Size

    1.9MB

  • Sample

    241128-bs6xmsvqbl

  • MD5

    b3afe151e1d94c9a50bf550bfec4dd86

  • SHA1

    3bac2109b4463e1c77ade33c65210ea5a56f7a95

  • SHA256

    fcd6bba27775fac0d39c361771b90a1a938e933eb5a08e4253698f3047fe0574

  • SHA512

    cc30e1bb5da5797176bb8e5ca482a52fbe00fd2a6f2dc4f2a7df74dda5b17f05026b8a931ee8997eedc36300aba5b21867ed4e1026a238ba54ee6a684f789537

  • SSDEEP

    49152:ffGGCIriZKJoB+JTDGyNJr5rZDCD0PjxB0N9aYUz:ffGL4QKJoB+pDGyNJtrZ1PjxB0N9aYUz

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2024-11-28_b3afe151e1d94c9a50bf550bfec4dd86_luca-stealer_smoke-loader_wapomi

    • Size

      1.9MB

    • MD5

      b3afe151e1d94c9a50bf550bfec4dd86

    • SHA1

      3bac2109b4463e1c77ade33c65210ea5a56f7a95

    • SHA256

      fcd6bba27775fac0d39c361771b90a1a938e933eb5a08e4253698f3047fe0574

    • SHA512

      cc30e1bb5da5797176bb8e5ca482a52fbe00fd2a6f2dc4f2a7df74dda5b17f05026b8a931ee8997eedc36300aba5b21867ed4e1026a238ba54ee6a684f789537

    • SSDEEP

      49152:ffGGCIriZKJoB+JTDGyNJr5rZDCD0PjxB0N9aYUz:ffGL4QKJoB+pDGyNJtrZ1PjxB0N9aYUz

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks