bdaejec | 958cc63f0254676e376b7c2fab17d4fbda2f9b0a8a06601254761d5590964671

General

Target
2026-04-20_41335d580e023991fa26941fd324cd03_amadey_elex_hellokitty_smoke-loader_wapomi
Size 121KB
Sample260420-p8nb5aa16l
SHA256 958cc63f0254676e376b7c2fab17d4fbda2f9b0a8a06601254761d5590964671
MD5 41335d580e023991fa26941fd324cd03
SHA1 14350c21351578dd7440bad48cba47f19e9c8caa
SHA512 a214d2c08c74a1aacb6654f318054890099060a19bb7c00ed10511f134d6e8cf7ad6425c59fa090cc39164e6872331fa8ab509b8994fa0483b87521b2342f65e
SSDEEP 3072:1u2crKOXWW5gfXYy81+biUBM3/9Mu0HrnflY++RfvfGCH:jOXrHQvhYjXO
TLSH
T1C2C36B2136D6C5B1E1A213728A74AFB68B79FD348F7191DB33D4460E88601C26EB1F67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  2026-04-20_41335d580e023991fa26941fd324cd03_amadey_elex_hellokitty_smoke-loader_wapomi
- Size 121KB
- SHA256 958cc63f0254676e376b7c2fab17d4fbda2f9b0a8a06601254761d5590964671
- MD5 41335d580e023991fa26941fd324cd03
- SHA1 14350c21351578dd7440bad48cba47f19e9c8caa
- SHA512 a214d2c08c74a1aacb6654f318054890099060a19bb7c00ed10511f134d6e8cf7ad6425c59fa090cc39164e6872331fa8ab509b8994fa0483b87521b2342f65e
- SSDEEP 3072:1u2crKOXWW5gfXYy81+biUBM3/9Mu0HrnflY++RfvfGCH:jOXrHQvhYjXO
- TLSH
  T1C2C36B2136D6C5B1E1A213728A74AFB68B79FD348F7191DB33D4460E88601C26EB1F67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

aspackv2 backdoor discovery bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- Family: Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Detects executables packed with ASPack
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Bdaejec Backdoor.

Family: Bdaejec

Detects executables packed with ASPack

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2