General
- Target 2026-06-08_a56174ae9ca2ee3e6edfc87e74ab3fb4_amadey_elex_smoke-loader_wapomi
- Size 37KB
- Sample260608-p9tkjadx3k
- SHA256 3d788f2c122b63a31108bfbc98afe01c6bd5fc9efc2c17455cfdf9df5fc37bb7
- MD5 a56174ae9ca2ee3e6edfc87e74ab3fb4
- SHA1 c4a740c32cf501565566935e0f1d0b00ba495344
- SHA512 868835d60e6a14184a57438697871bbb771397dee249bb92e5bdbb9a8febfc73b2a02fa5baa0259f0981512de67689edf397f587eb2e9dd799c8943c020c3fe6
- SSDEEP 768:TumWlnpOFj9kDs4QGPL4vzZq2o9W7GsxBbPr:RypyjCDsTGCq2iW7z
- TLSH T1C0037C23CBE8886BF0FA767050669226663FB6319F60D5CFF60402692D30E91EC3571B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-06-08_a56174ae9ca2ee3e6edfc87e74ab3fb4_amadey_elex_smoke-loader_wapomi
- Size 37KB
- SHA256 3d788f2c122b63a31108bfbc98afe01c6bd5fc9efc2c17455cfdf9df5fc37bb7
- MD5 a56174ae9ca2ee3e6edfc87e74ab3fb4
- SHA1 c4a740c32cf501565566935e0f1d0b00ba495344
- SHA512 868835d60e6a14184a57438697871bbb771397dee249bb92e5bdbb9a8febfc73b2a02fa5baa0259f0981512de67689edf397f587eb2e9dd799c8943c020c3fe6
- SSDEEP 768:TumWlnpOFj9kDs4QGPL4vzZq2o9W7GsxBbPr:RypyjCDsTGCq2iW7z
- TLSH T1C0037C23CBE8886BF0FA767050669226663FB6319F60D5CFF60402692D30E91EC3571B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE