General
-
Target
2025-01-17_fbf8aa7ede6c324ea515eb29156fd431_smoke-loader_wapomi
-
Size
36KB
-
Sample
250117-djfefazmet
-
MD5
fbf8aa7ede6c324ea515eb29156fd431
-
SHA1
bd51c5b3635617d5475c64ed13b49b064928cf62
-
SHA256
a38dd45ac4cd62513e04d73c750d5ec0a57045b5af69dd1590205d022e71f7e5
-
SHA512
4c0f491469877880c9741a68e3e6b131091d8b94624ee2d204f88c27e2d4f6eb85d423319299afdb8006714f4d11a8a8d41004e86cad6892a4654b0cb94627c7
-
SSDEEP
768:aA+m41HKUpOv068E4Mf4MMRt4MtV2n51WQGPL4vzZq2o9W7GsxBbPr:aA+m6qqOcVEP87T2n51NGCq2iW7z
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-17_fbf8aa7ede6c324ea515eb29156fd431_smoke-loader_wapomi.exe
Resource
win7-20240903-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-01-17_fbf8aa7ede6c324ea515eb29156fd431_smoke-loader_wapomi
-
Size
36KB
-
MD5
fbf8aa7ede6c324ea515eb29156fd431
-
SHA1
bd51c5b3635617d5475c64ed13b49b064928cf62
-
SHA256
a38dd45ac4cd62513e04d73c750d5ec0a57045b5af69dd1590205d022e71f7e5
-
SHA512
4c0f491469877880c9741a68e3e6b131091d8b94624ee2d204f88c27e2d4f6eb85d423319299afdb8006714f4d11a8a8d41004e86cad6892a4654b0cb94627c7
-
SSDEEP
768:aA+m41HKUpOv068E4Mf4MMRt4MtV2n51WQGPL4vzZq2o9W7GsxBbPr:aA+m6qqOcVEP87T2n51NGCq2iW7z
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-