General
-
Target
2025-01-07_44fca372312a896731423669c0fcfa21_smoke-loader_wapomi
-
Size
80KB
-
Sample
250107-cwccwazkbs
-
MD5
44fca372312a896731423669c0fcfa21
-
SHA1
6d095e0cc7227c9003fad11e7f9a8001d6a98d73
-
SHA256
e9cf29f2ca43e191791ff9be3c6a8d375207579b88846297608df7ff1c4e1543
-
SHA512
4bb98366d7b9a2893616fe51a7245750ecbd9786cbff54266e4349168ed23147da413a2b8ff0bdf01ee336b4ec2864092c34d680f292620a42f9e9a038b41467
-
SSDEEP
1536:RfnLq01weW5yX3jFxv49Nu4GhQ42GCq2iW7z:Y3ysTGhQfGCH
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-07_44fca372312a896731423669c0fcfa21_smoke-loader_wapomi.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-01-07_44fca372312a896731423669c0fcfa21_smoke-loader_wapomi
-
Size
80KB
-
MD5
44fca372312a896731423669c0fcfa21
-
SHA1
6d095e0cc7227c9003fad11e7f9a8001d6a98d73
-
SHA256
e9cf29f2ca43e191791ff9be3c6a8d375207579b88846297608df7ff1c4e1543
-
SHA512
4bb98366d7b9a2893616fe51a7245750ecbd9786cbff54266e4349168ed23147da413a2b8ff0bdf01ee336b4ec2864092c34d680f292620a42f9e9a038b41467
-
SSDEEP
1536:RfnLq01weW5yX3jFxv49Nu4GhQ42GCq2iW7z:Y3ysTGhQfGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-