General

  • Target

    2025-04-07_b852fe398fddb666165a848cf8898f5d_amadey_black-basta_luca-stealer_smoke-loader_wapomi

  • Size

    10.7MB

  • Sample

    250407-m8s69szms2

  • MD5

    b852fe398fddb666165a848cf8898f5d

  • SHA1

    7cff4d36a55672a80141bd55fabd8d445007c1c4

  • SHA256

    2e43735e936ea8fcc3f39c75cd4250090b08e3e34de3ba110c25f9ba369f4c93

  • SHA512

    d8af49ad7b52b67fc90a8c50ea6ebfd4c9fca4f8a1237fd85e97d2c4a7fcb2b91ee195eab9200ec740b69dcfc8b85a3a1e73be77bd219da1a157169e5724f6da

  • SSDEEP

    196608:kLzsxWM84bJNl21pe4QJuLftS37vGak7jdaOfC:GQwM/bJNAKRYL1S3TG1aO

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-04-07_b852fe398fddb666165a848cf8898f5d_amadey_black-basta_luca-stealer_smoke-loader_wapomi

    • Size

      10.7MB

    • MD5

      b852fe398fddb666165a848cf8898f5d

    • SHA1

      7cff4d36a55672a80141bd55fabd8d445007c1c4

    • SHA256

      2e43735e936ea8fcc3f39c75cd4250090b08e3e34de3ba110c25f9ba369f4c93

    • SHA512

      d8af49ad7b52b67fc90a8c50ea6ebfd4c9fca4f8a1237fd85e97d2c4a7fcb2b91ee195eab9200ec740b69dcfc8b85a3a1e73be77bd219da1a157169e5724f6da

    • SSDEEP

      196608:kLzsxWM84bJNl21pe4QJuLftS37vGak7jdaOfC:GQwM/bJNAKRYL1S3TG1aO

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks