General

  • Target

    2025-04-14_366613e66688b6dfcd26cf95b33a6918_elex_smoke-loader_wapomi

  • Size

    62KB

  • Sample

    250414-ygxk6azjy9

  • MD5

    366613e66688b6dfcd26cf95b33a6918

  • SHA1

    8af93adceb5ce5f68e8be8bbb7fb6d6ccd2fb016

  • SHA256

    d26988e3d89fcac6c9f8fdd665bc20355a6a2829211b9e063a32eb9d741202f9

  • SHA512

    d2345b51410614c3a894457862be08913bbf1795f23234be1ddf17e8da585ddfe62c264044898929397a7fa1cbe487a3118205dfe41109f89fa6fd6400785569

  • SSDEEP

    1536:Eq824LfMolS4TydhbKYi/KtSIyX66DCGCq2iW7z:ExLUl4TcLlwX66uGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-04-14_366613e66688b6dfcd26cf95b33a6918_elex_smoke-loader_wapomi

    • Size

      62KB

    • MD5

      366613e66688b6dfcd26cf95b33a6918

    • SHA1

      8af93adceb5ce5f68e8be8bbb7fb6d6ccd2fb016

    • SHA256

      d26988e3d89fcac6c9f8fdd665bc20355a6a2829211b9e063a32eb9d741202f9

    • SHA512

      d2345b51410614c3a894457862be08913bbf1795f23234be1ddf17e8da585ddfe62c264044898929397a7fa1cbe487a3118205dfe41109f89fa6fd6400785569

    • SSDEEP

      1536:Eq824LfMolS4TydhbKYi/KtSIyX66DCGCq2iW7z:ExLUl4TcLlwX66uGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks