General
-
Target
2025-04-18_355f0d118e526eb1a685852f1fa53ef8_elex_smoke-loader_wapomi
-
Size
22KB
-
Sample
250418-knzr7s1k16
-
MD5
355f0d118e526eb1a685852f1fa53ef8
-
SHA1
2208155f2d2c0c1609f8d8704719e34b4cb05ec4
-
SHA256
18c3a37c21336c521f63c8d0a396c5653b3c622ebf3a4aa4b754eb619698d2a5
-
SHA512
e53d30f38170af231112bfe1e8ff2963f28626fa89da796bb5eedb832b4bfa1d93bceb46eae6e7673e279608646b6f8c12b455d99a2aa4b6a15c4531e048ef9e
-
SSDEEP
384:e4HQ3yW1XS7XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:ryRi1QGPL4vzZq2o9W7GsxBbPr
Static task
static1
Behavioral task
behavioral1
Sample
2025-04-18_355f0d118e526eb1a685852f1fa53ef8_elex_smoke-loader_wapomi.exe
Resource
win10v2004-20250410-en
Malware Config
Extracted
bdaejec
ddos.dnsnb8.net
Targets
-
-
Target
2025-04-18_355f0d118e526eb1a685852f1fa53ef8_elex_smoke-loader_wapomi
-
Size
22KB
-
MD5
355f0d118e526eb1a685852f1fa53ef8
-
SHA1
2208155f2d2c0c1609f8d8704719e34b4cb05ec4
-
SHA256
18c3a37c21336c521f63c8d0a396c5653b3c622ebf3a4aa4b754eb619698d2a5
-
SHA512
e53d30f38170af231112bfe1e8ff2963f28626fa89da796bb5eedb832b4bfa1d93bceb46eae6e7673e279608646b6f8c12b455d99a2aa4b6a15c4531e048ef9e
-
SSDEEP
384:e4HQ3yW1XS7XZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:ryRi1QGPL4vzZq2o9W7GsxBbPr
-
Bdaejec family
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-