General
-
Target
2025-04-11_e683f2d920776a72085fd9e153779fbd_elex_rhadamanthys_smoke-loader_wapomi
-
Size
80KB
-
Sample
250411-qddd4sznw5
-
MD5
e683f2d920776a72085fd9e153779fbd
-
SHA1
03bd5d2268d9e681139bff583d417f2b83e4732e
-
SHA256
fbbc97503a71bcfad1044db44a97d8bf2e3f7d6b5b99fe1d40cf6f5259caf386
-
SHA512
20af173b25331f9d5a6e7ecdd9fc44492ef48c30f45bd4ef7c8331cda63bd18d21d226d431c9de79889fdb5579f078f2cf9cef52585c21e19661520d810decb5
-
SSDEEP
1536:Yg/6/tM8NXDjPX0QWlfGMckTQlnGCq2iW7z:Hk3U8kTQxGCH
Static task
static1
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-04-11_e683f2d920776a72085fd9e153779fbd_elex_rhadamanthys_smoke-loader_wapomi
-
Size
80KB
-
MD5
e683f2d920776a72085fd9e153779fbd
-
SHA1
03bd5d2268d9e681139bff583d417f2b83e4732e
-
SHA256
fbbc97503a71bcfad1044db44a97d8bf2e3f7d6b5b99fe1d40cf6f5259caf386
-
SHA512
20af173b25331f9d5a6e7ecdd9fc44492ef48c30f45bd4ef7c8331cda63bd18d21d226d431c9de79889fdb5579f078f2cf9cef52585c21e19661520d810decb5
-
SSDEEP
1536:Yg/6/tM8NXDjPX0QWlfGMckTQlnGCq2iW7z:Hk3U8kTQxGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-