bdaejec | c05a51d2414bc8db0ef62284547ac26c9a6b04931a267c9eb7b172c89112aa0a

General

Target
2026-06-02_1185006bd4cd7a3c2bf911dacb0d31c3_elex_smoke-loader_wapomi
Size 31KB
Sample260602-rf848sgv2p
SHA256 c05a51d2414bc8db0ef62284547ac26c9a6b04931a267c9eb7b172c89112aa0a
MD5 1185006bd4cd7a3c2bf911dacb0d31c3
SHA1 cd236d4f24575b72e17aa88a58f7f16f03b0b3b5
SHA512 55b2857dc08043b45ece032e0fcd9ed7bc1993ce1b740915d9ea12bdccd6bb40380d018e424cde49576fae427bc9f61d182841b999033b4b40bed39525aa0d9e
SSDEEP 768:gSMS1dKGTpZgHh+YkQGPL4vzZq2o9W7GsxBbPr:OmFi+Y3GCq2iW7z
TLSH
T183E28D6F4F88C0FBC7C93173499A113ECF33D951726AB91BD2A0D855A8B7660F82D249
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  2026-06-02_1185006bd4cd7a3c2bf911dacb0d31c3_elex_smoke-loader_wapomi
- Size 31KB
- SHA256 c05a51d2414bc8db0ef62284547ac26c9a6b04931a267c9eb7b172c89112aa0a
- MD5 1185006bd4cd7a3c2bf911dacb0d31c3
- SHA1 cd236d4f24575b72e17aa88a58f7f16f03b0b3b5
- SHA512 55b2857dc08043b45ece032e0fcd9ed7bc1993ce1b740915d9ea12bdccd6bb40380d018e424cde49576fae427bc9f61d182841b999033b4b40bed39525aa0d9e
- SSDEEP 768:gSMS1dKGTpZgHh+YkQGPL4vzZq2o9W7GsxBbPr:OmFi+Y3GCq2iW7z
- TLSH
  T183E28D6F4F88C0FBC7C93173499A113ECF33D951726AB91BD2A0D855A8B7660F82D249
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

aspackv2 backdoor discovery bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- Family: Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Detects executables packed with ASPack
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Bdaejec Backdoor.

Family: Bdaejec

Detects executables packed with ASPack

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2