General
-
Target
2025-04-14_ee4d9ee010e09967f09c78d3945f9e0c_elex_smoke-loader_wapomi
-
Size
62KB
-
Sample
250414-ys2dgsxyes
-
MD5
ee4d9ee010e09967f09c78d3945f9e0c
-
SHA1
858b365b379dd36b03aabee516ca0fcbb87e2067
-
SHA256
32116566af1051c5dc1faa2116cec9d0900b19c884e8f059dbe9e5327553088e
-
SHA512
737592a9a3dfce9ffb85b89e7673243e3aaa0ef5c4ad0bde9a9db3acf9429fce701ad3da2c8399dba9e43c1b1c92ed1aae30f1a070332b02188e31f062f6e51e
-
SSDEEP
1536:3x2qYms6rlS4TydhbKYi/KtSIyX66ICGCq2iW7z:gGA4TcLlwX66PGCH
Static task
static1
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-04-14_ee4d9ee010e09967f09c78d3945f9e0c_elex_smoke-loader_wapomi
-
Size
62KB
-
MD5
ee4d9ee010e09967f09c78d3945f9e0c
-
SHA1
858b365b379dd36b03aabee516ca0fcbb87e2067
-
SHA256
32116566af1051c5dc1faa2116cec9d0900b19c884e8f059dbe9e5327553088e
-
SHA512
737592a9a3dfce9ffb85b89e7673243e3aaa0ef5c4ad0bde9a9db3acf9429fce701ad3da2c8399dba9e43c1b1c92ed1aae30f1a070332b02188e31f062f6e51e
-
SSDEEP
1536:3x2qYms6rlS4TydhbKYi/KtSIyX66ICGCq2iW7z:gGA4TcLlwX66PGCH
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-