Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2025-03-25_4d122c6ecd145fb05d2f7b53752cf9ff_rhadamanthys_smoke-loader_wapomi

  • Size

    80KB

  • Sample

    250325-n2jjxsyqt2

  • MD5

    4d122c6ecd145fb05d2f7b53752cf9ff

  • SHA1

    8197258a6023a54a607f8ecee45112b2ebed8560

  • SHA256

    fb81286e6b8f8d38094e3cc2a10c776b1a6bc765dde8c97ffa8818061a3c95e3

  • SHA512

    c16177a8942f3625ba09e235f3ea4e76f011d8d7f9c771a5661c3d614eeb837f8141831115575aa86c3a7749df03a53615531447fec262858dc527b91983d729

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQMlGCq2iW7z:Y3ysTGhQgGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-03-25_4d122c6ecd145fb05d2f7b53752cf9ff_rhadamanthys_smoke-loader_wapomi

    • Size

      80KB

    • MD5

      4d122c6ecd145fb05d2f7b53752cf9ff

    • SHA1

      8197258a6023a54a607f8ecee45112b2ebed8560

    • SHA256

      fb81286e6b8f8d38094e3cc2a10c776b1a6bc765dde8c97ffa8818061a3c95e3

    • SHA512

      c16177a8942f3625ba09e235f3ea4e76f011d8d7f9c771a5661c3d614eeb837f8141831115575aa86c3a7749df03a53615531447fec262858dc527b91983d729

    • SSDEEP

      1536:RfnLq01weW5yX3jFxv49Nu4GhQMlGCq2iW7z:Y3ysTGhQgGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks