General

  • Target

    2025-04-18_355f0d118e526eb1a685852f1fa53ef8_elex_smoke-loader_wapomi

  • Size

    22KB

  • Sample

    250418-knzr7s1k16

  • MD5

    355f0d118e526eb1a685852f1fa53ef8

  • SHA1

    2208155f2d2c0c1609f8d8704719e34b4cb05ec4

  • SHA256

    18c3a37c21336c521f63c8d0a396c5653b3c622ebf3a4aa4b754eb619698d2a5

  • SHA512

    e53d30f38170af231112bfe1e8ff2963f28626fa89da796bb5eedb832b4bfa1d93bceb46eae6e7673e279608646b6f8c12b455d99a2aa4b6a15c4531e048ef9e

  • SSDEEP

    384:e4HQ3yW1XS7XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:ryRi1QGPL4vzZq2o9W7GsxBbPr

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

    • Target

      2025-04-18_355f0d118e526eb1a685852f1fa53ef8_elex_smoke-loader_wapomi

    • Size

      22KB

    • MD5

      355f0d118e526eb1a685852f1fa53ef8

    • SHA1

      2208155f2d2c0c1609f8d8704719e34b4cb05ec4

    • SHA256

      18c3a37c21336c521f63c8d0a396c5653b3c622ebf3a4aa4b754eb619698d2a5

    • SHA512

      e53d30f38170af231112bfe1e8ff2963f28626fa89da796bb5eedb832b4bfa1d93bceb46eae6e7673e279608646b6f8c12b455d99a2aa4b6a15c4531e048ef9e

    • SSDEEP

      384:e4HQ3yW1XS7XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:ryRi1QGPL4vzZq2o9W7GsxBbPr

    • Bdaejec

      Bdaejec is a backdoor written in C++.

    • Bdaejec family

    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks