General
-
Target
2025-02-23_0b53f88cebdf642f264fdaf6932cc582_silence_smoke-loader_wapomi
-
Size
224KB
-
Sample
250223-x37sksvlds
-
MD5
0b53f88cebdf642f264fdaf6932cc582
-
SHA1
d20a66ee7432b0b4ef41b132c214bcea588aa3b8
-
SHA256
4099a0440625d762a542e610c1318141c6ebb69d6fc9d81e28d111ca8b9316c8
-
SHA512
8a8a4733c115863dd55ec8eeea4f79cdc3978f5ab82cd2f5bffc674abb03bbe883bb67a6903fc6e083243296eb22963daa7c8753ed7c0668cab6d14ca7c89c05
-
SSDEEP
3072:2ZgR4cDKMU+hynHrpU7E6gVD7rLryLCTDp+VZI1+5joptJL0GCH:mdIKMHhAgAVD7TvhLPJJ
Static task
static1
Behavioral task
behavioral1
Sample
2025-02-23_0b53f88cebdf642f264fdaf6932cc582_silence_smoke-loader_wapomi.exe
Resource
win7-20241010-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-02-23_0b53f88cebdf642f264fdaf6932cc582_silence_smoke-loader_wapomi
-
Size
224KB
-
MD5
0b53f88cebdf642f264fdaf6932cc582
-
SHA1
d20a66ee7432b0b4ef41b132c214bcea588aa3b8
-
SHA256
4099a0440625d762a542e610c1318141c6ebb69d6fc9d81e28d111ca8b9316c8
-
SHA512
8a8a4733c115863dd55ec8eeea4f79cdc3978f5ab82cd2f5bffc674abb03bbe883bb67a6903fc6e083243296eb22963daa7c8753ed7c0668cab6d14ca7c89c05
-
SSDEEP
3072:2ZgR4cDKMU+hynHrpU7E6gVD7rLryLCTDp+VZI1+5joptJL0GCH:mdIKMHhAgAVD7TvhLPJJ
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-