General
-
Target
2025-04-07_b852fe398fddb666165a848cf8898f5d_amadey_black-basta_luca-stealer_smoke-loader_wapomi
-
Size
10.7MB
-
Sample
250407-m8s69szms2
-
MD5
b852fe398fddb666165a848cf8898f5d
-
SHA1
7cff4d36a55672a80141bd55fabd8d445007c1c4
-
SHA256
2e43735e936ea8fcc3f39c75cd4250090b08e3e34de3ba110c25f9ba369f4c93
-
SHA512
d8af49ad7b52b67fc90a8c50ea6ebfd4c9fca4f8a1237fd85e97d2c4a7fcb2b91ee195eab9200ec740b69dcfc8b85a3a1e73be77bd219da1a157169e5724f6da
-
SSDEEP
196608:kLzsxWM84bJNl21pe4QJuLftS37vGak7jdaOfC:GQwM/bJNAKRYL1S3TG1aO
Static task
static1
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-04-07_b852fe398fddb666165a848cf8898f5d_amadey_black-basta_luca-stealer_smoke-loader_wapomi
-
Size
10.7MB
-
MD5
b852fe398fddb666165a848cf8898f5d
-
SHA1
7cff4d36a55672a80141bd55fabd8d445007c1c4
-
SHA256
2e43735e936ea8fcc3f39c75cd4250090b08e3e34de3ba110c25f9ba369f4c93
-
SHA512
d8af49ad7b52b67fc90a8c50ea6ebfd4c9fca4f8a1237fd85e97d2c4a7fcb2b91ee195eab9200ec740b69dcfc8b85a3a1e73be77bd219da1a157169e5724f6da
-
SSDEEP
196608:kLzsxWM84bJNl21pe4QJuLftS37vGak7jdaOfC:GQwM/bJNAKRYL1S3TG1aO
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-