General

  • Target

    2025-01-17_fbf8aa7ede6c324ea515eb29156fd431_smoke-loader_wapomi

  • Size

    36KB

  • Sample

    250117-djfefazmet

  • MD5

    fbf8aa7ede6c324ea515eb29156fd431

  • SHA1

    bd51c5b3635617d5475c64ed13b49b064928cf62

  • SHA256

    a38dd45ac4cd62513e04d73c750d5ec0a57045b5af69dd1590205d022e71f7e5

  • SHA512

    4c0f491469877880c9741a68e3e6b131091d8b94624ee2d204f88c27e2d4f6eb85d423319299afdb8006714f4d11a8a8d41004e86cad6892a4654b0cb94627c7

  • SSDEEP

    768:aA+m41HKUpOv068E4Mf4MMRt4MtV2n51WQGPL4vzZq2o9W7GsxBbPr:aA+m6qqOcVEP87T2n51NGCq2iW7z

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-01-17_fbf8aa7ede6c324ea515eb29156fd431_smoke-loader_wapomi

    • Size

      36KB

    • MD5

      fbf8aa7ede6c324ea515eb29156fd431

    • SHA1

      bd51c5b3635617d5475c64ed13b49b064928cf62

    • SHA256

      a38dd45ac4cd62513e04d73c750d5ec0a57045b5af69dd1590205d022e71f7e5

    • SHA512

      4c0f491469877880c9741a68e3e6b131091d8b94624ee2d204f88c27e2d4f6eb85d423319299afdb8006714f4d11a8a8d41004e86cad6892a4654b0cb94627c7

    • SSDEEP

      768:aA+m41HKUpOv068E4Mf4MMRt4MtV2n51WQGPL4vzZq2o9W7GsxBbPr:aA+m6qqOcVEP87T2n51NGCq2iW7z

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks