General
-
Target
2025-04-14_366613e66688b6dfcd26cf95b33a6918_elex_smoke-loader_wapomi
-
Size
62KB
-
Sample
250414-ygxk6azjy9
-
MD5
366613e66688b6dfcd26cf95b33a6918
-
SHA1
8af93adceb5ce5f68e8be8bbb7fb6d6ccd2fb016
-
SHA256
d26988e3d89fcac6c9f8fdd665bc20355a6a2829211b9e063a32eb9d741202f9
-
SHA512
d2345b51410614c3a894457862be08913bbf1795f23234be1ddf17e8da585ddfe62c264044898929397a7fa1cbe487a3118205dfe41109f89fa6fd6400785569
-
SSDEEP
1536:Eq824LfMolS4TydhbKYi/KtSIyX66DCGCq2iW7z:ExLUl4TcLlwX66uGCH
Static task
static1
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-04-14_366613e66688b6dfcd26cf95b33a6918_elex_smoke-loader_wapomi
-
Size
62KB
-
MD5
366613e66688b6dfcd26cf95b33a6918
-
SHA1
8af93adceb5ce5f68e8be8bbb7fb6d6ccd2fb016
-
SHA256
d26988e3d89fcac6c9f8fdd665bc20355a6a2829211b9e063a32eb9d741202f9
-
SHA512
d2345b51410614c3a894457862be08913bbf1795f23234be1ddf17e8da585ddfe62c264044898929397a7fa1cbe487a3118205dfe41109f89fa6fd6400785569
-
SSDEEP
1536:Eq824LfMolS4TydhbKYi/KtSIyX66DCGCq2iW7z:ExLUl4TcLlwX66uGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-