General

  • Target

    2025-02-23_0b53f88cebdf642f264fdaf6932cc582_silence_smoke-loader_wapomi

  • Size

    224KB

  • Sample

    250223-x37sksvlds

  • MD5

    0b53f88cebdf642f264fdaf6932cc582

  • SHA1

    d20a66ee7432b0b4ef41b132c214bcea588aa3b8

  • SHA256

    4099a0440625d762a542e610c1318141c6ebb69d6fc9d81e28d111ca8b9316c8

  • SHA512

    8a8a4733c115863dd55ec8eeea4f79cdc3978f5ab82cd2f5bffc674abb03bbe883bb67a6903fc6e083243296eb22963daa7c8753ed7c0668cab6d14ca7c89c05

  • SSDEEP

    3072:2ZgR4cDKMU+hynHrpU7E6gVD7rLryLCTDp+VZI1+5joptJL0GCH:mdIKMHhAgAVD7TvhLPJJ

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-02-23_0b53f88cebdf642f264fdaf6932cc582_silence_smoke-loader_wapomi

    • Size

      224KB

    • MD5

      0b53f88cebdf642f264fdaf6932cc582

    • SHA1

      d20a66ee7432b0b4ef41b132c214bcea588aa3b8

    • SHA256

      4099a0440625d762a542e610c1318141c6ebb69d6fc9d81e28d111ca8b9316c8

    • SHA512

      8a8a4733c115863dd55ec8eeea4f79cdc3978f5ab82cd2f5bffc674abb03bbe883bb67a6903fc6e083243296eb22963daa7c8753ed7c0668cab6d14ca7c89c05

    • SSDEEP

      3072:2ZgR4cDKMU+hynHrpU7E6gVD7rLryLCTDp+VZI1+5joptJL0GCH:mdIKMHhAgAVD7TvhLPJJ

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks