General

  • Target

    2025-01-07_44fca372312a896731423669c0fcfa21_smoke-loader_wapomi

  • Size

    80KB

  • Sample

    250107-cwccwazkbs

  • MD5

    44fca372312a896731423669c0fcfa21

  • SHA1

    6d095e0cc7227c9003fad11e7f9a8001d6a98d73

  • SHA256

    e9cf29f2ca43e191791ff9be3c6a8d375207579b88846297608df7ff1c4e1543

  • SHA512

    4bb98366d7b9a2893616fe51a7245750ecbd9786cbff54266e4349168ed23147da413a2b8ff0bdf01ee336b4ec2864092c34d680f292620a42f9e9a038b41467

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQ42GCq2iW7z:Y3ysTGhQfGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-01-07_44fca372312a896731423669c0fcfa21_smoke-loader_wapomi

    • Size

      80KB

    • MD5

      44fca372312a896731423669c0fcfa21

    • SHA1

      6d095e0cc7227c9003fad11e7f9a8001d6a98d73

    • SHA256

      e9cf29f2ca43e191791ff9be3c6a8d375207579b88846297608df7ff1c4e1543

    • SHA512

      4bb98366d7b9a2893616fe51a7245750ecbd9786cbff54266e4349168ed23147da413a2b8ff0bdf01ee336b4ec2864092c34d680f292620a42f9e9a038b41467

    • SSDEEP

      1536:RfnLq01weW5yX3jFxv49Nu4GhQ42GCq2iW7z:Y3ysTGhQfGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks