General
-
Target
2025-04-17_4ef7486b79c05e74e914ee1dc9223ea0_amadey_black-basta_cobalt-strike_elex_luca-stealer_wapomi
-
Size
572KB
-
Sample
250417-p9kydsypt9
-
MD5
4ef7486b79c05e74e914ee1dc9223ea0
-
SHA1
b8bc560a79e53c8518c96d607f914129326499b7
-
SHA256
dc0f50a80413fe67c772763bab3e1e6d67e3d58a80e9e8586e6c7f300d22acc6
-
SHA512
2fa51321532c07dc4ebdc0a28bceaa4a5fbb13260728aacd7d3c6b920293776c67cf26d32d37daf2024e66d7474ec43883100a07e1a845d76669e6f230bcd457
-
SSDEEP
12288:96+OkYKllc/IwoG4fDXirqZ1xQMAejKv4fkuRdujMhVtr+pHb5hbczs/s4yxGMoM:4+N/Sw3G4fWG3+U5ujMNQv04yxtb1yH0
Static task
static1
Behavioral task
behavioral1
Sample
2025-04-17_4ef7486b79c05e74e914ee1dc9223ea0_amadey_black-basta_cobalt-strike_elex_luca-stealer_wapomi.exe
Resource
win10v2004-20250410-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-04-17_4ef7486b79c05e74e914ee1dc9223ea0_amadey_black-basta_cobalt-strike_elex_luca-stealer_wapomi
-
Size
572KB
-
MD5
4ef7486b79c05e74e914ee1dc9223ea0
-
SHA1
b8bc560a79e53c8518c96d607f914129326499b7
-
SHA256
dc0f50a80413fe67c772763bab3e1e6d67e3d58a80e9e8586e6c7f300d22acc6
-
SHA512
2fa51321532c07dc4ebdc0a28bceaa4a5fbb13260728aacd7d3c6b920293776c67cf26d32d37daf2024e66d7474ec43883100a07e1a845d76669e6f230bcd457
-
SSDEEP
12288:96+OkYKllc/IwoG4fDXirqZ1xQMAejKv4fkuRdujMhVtr+pHb5hbczs/s4yxGMoM:4+N/Sw3G4fWG3+U5ujMNQv04yxtb1yH0
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-