General
-
Target
2024-12-21_5fb9e855bbf0efa6b31af9f7f3eb7866_smoke-loader_wapomi
-
Size
135KB
-
Sample
241221-by58asypf1
-
MD5
5fb9e855bbf0efa6b31af9f7f3eb7866
-
SHA1
046f34bf5617e23bc7708014e366acf1736a25d5
-
SHA256
18cd6a446b78a6c4538395c84d498adb089d6cb0adccadc7a9dcaccf210db551
-
SHA512
796fd9c59dcbe4399b03bbd813e548ba1a8c33e4e01c0f79ab2737ba6ce139366c80d163438b5b2bf76c74c0172ddfa8ac2a7a8fa686f15df788b671feb34aa1
-
SSDEEP
3072:qZnWqBQkdY02jdZ39Byzq1Tx+zwb8eL2QJ8qy8GCH:zqB9yRZryYkDB
Static task
static1
Behavioral task
behavioral1
Sample
2024-12-21_5fb9e855bbf0efa6b31af9f7f3eb7866_smoke-loader_wapomi.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2024-12-21_5fb9e855bbf0efa6b31af9f7f3eb7866_smoke-loader_wapomi
-
Size
135KB
-
MD5
5fb9e855bbf0efa6b31af9f7f3eb7866
-
SHA1
046f34bf5617e23bc7708014e366acf1736a25d5
-
SHA256
18cd6a446b78a6c4538395c84d498adb089d6cb0adccadc7a9dcaccf210db551
-
SHA512
796fd9c59dcbe4399b03bbd813e548ba1a8c33e4e01c0f79ab2737ba6ce139366c80d163438b5b2bf76c74c0172ddfa8ac2a7a8fa686f15df788b671feb34aa1
-
SSDEEP
3072:qZnWqBQkdY02jdZ39Byzq1Tx+zwb8eL2QJ8qy8GCH:zqB9yRZryYkDB
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-