General

  • Target

    2025-04-14_ee4d9ee010e09967f09c78d3945f9e0c_elex_smoke-loader_wapomi

  • Size

    62KB

  • Sample

    250414-ys2dgsxyes

  • MD5

    ee4d9ee010e09967f09c78d3945f9e0c

  • SHA1

    858b365b379dd36b03aabee516ca0fcbb87e2067

  • SHA256

    32116566af1051c5dc1faa2116cec9d0900b19c884e8f059dbe9e5327553088e

  • SHA512

    737592a9a3dfce9ffb85b89e7673243e3aaa0ef5c4ad0bde9a9db3acf9429fce701ad3da2c8399dba9e43c1b1c92ed1aae30f1a070332b02188e31f062f6e51e

  • SSDEEP

    1536:3x2qYms6rlS4TydhbKYi/KtSIyX66ICGCq2iW7z:gGA4TcLlwX66PGCH

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-04-14_ee4d9ee010e09967f09c78d3945f9e0c_elex_smoke-loader_wapomi

    • Size

      62KB

    • MD5

      ee4d9ee010e09967f09c78d3945f9e0c

    • SHA1

      858b365b379dd36b03aabee516ca0fcbb87e2067

    • SHA256

      32116566af1051c5dc1faa2116cec9d0900b19c884e8f059dbe9e5327553088e

    • SHA512

      737592a9a3dfce9ffb85b89e7673243e3aaa0ef5c4ad0bde9a9db3acf9429fce701ad3da2c8399dba9e43c1b1c92ed1aae30f1a070332b02188e31f062f6e51e

    • SSDEEP

      1536:3x2qYms6rlS4TydhbKYi/KtSIyX66ICGCq2iW7z:gGA4TcLlwX66PGCH

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks