General

  • Target

    2025-04-11_e683f2d920776a72085fd9e153779fbd_elex_rhadamanthys_smoke-loader_wapomi

  • Size

    80KB

  • Sample

    250411-qddd4sznw5

  • MD5

    e683f2d920776a72085fd9e153779fbd

  • SHA1

    03bd5d2268d9e681139bff583d417f2b83e4732e

  • SHA256

    fbbc97503a71bcfad1044db44a97d8bf2e3f7d6b5b99fe1d40cf6f5259caf386

  • SHA512

    20af173b25331f9d5a6e7ecdd9fc44492ef48c30f45bd4ef7c8331cda63bd18d21d226d431c9de79889fdb5579f078f2cf9cef52585c21e19661520d810decb5

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQlnGCq2iW7z:Hk3U8kTQxGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-04-11_e683f2d920776a72085fd9e153779fbd_elex_rhadamanthys_smoke-loader_wapomi

    • Size

      80KB

    • MD5

      e683f2d920776a72085fd9e153779fbd

    • SHA1

      03bd5d2268d9e681139bff583d417f2b83e4732e

    • SHA256

      fbbc97503a71bcfad1044db44a97d8bf2e3f7d6b5b99fe1d40cf6f5259caf386

    • SHA512

      20af173b25331f9d5a6e7ecdd9fc44492ef48c30f45bd4ef7c8331cda63bd18d21d226d431c9de79889fdb5579f078f2cf9cef52585c21e19661520d810decb5

    • SSDEEP

      1536:Yg/6/tM8NXDjPX0QWlfGMckTQlnGCq2iW7z:Hk3U8kTQxGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks