bdaejec | 0a71eabfd6d9acc44446358fdbe7a24027784f53f0909df7fbc0be75fe826f97

General

Target
2026-06-30_0a6973d9ae567defb596b9038a25f7f4_amadey_elex_smoke-loader_wapomi
Size 303KB
Sample260701-a82gesbx6j
SHA256 0a71eabfd6d9acc44446358fdbe7a24027784f53f0909df7fbc0be75fe826f97
MD5 0a6973d9ae567defb596b9038a25f7f4
SHA1 7548c15b65918bb551550ce530bb8b5fab5e9836
SHA512 8f64a9a651d80b6571fd1755e1b49ea6de6d8de5f461ea946963f53c3ec79f9d921ffc0a67dcc762b9578edf4f07667ee81246876f6eeb37b7bdf67d7b1bacde
SSDEEP 6144:RdZiP3k3YeDgU5nMNsDQzcmGxF1RYTc3fD8Xhwm3zdiMMKpLu:RdZc0lp4PzanGQ3fAC2Mo
TLSH
T1F8646B127FF4C03BD64302329F5D5B95A0FA93A90D31498327C40E6CEA759D6E36AE2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  2026-06-30_0a6973d9ae567defb596b9038a25f7f4_amadey_elex_smoke-loader_wapomi
- Size 303KB
- SHA256 0a71eabfd6d9acc44446358fdbe7a24027784f53f0909df7fbc0be75fe826f97
- MD5 0a6973d9ae567defb596b9038a25f7f4
- SHA1 7548c15b65918bb551550ce530bb8b5fab5e9836
- SHA512 8f64a9a651d80b6571fd1755e1b49ea6de6d8de5f461ea946963f53c3ec79f9d921ffc0a67dcc762b9578edf4f07667ee81246876f6eeb37b7bdf67d7b1bacde
- SSDEEP 6144:RdZiP3k3YeDgU5nMNsDQzcmGxF1RYTc3fD8Xhwm3zdiMMKpLu:RdZc0lp4PzanGQ3fAC2Mo
- TLSH
  T1F8646B127FF4C03BD64302329F5D5B95A0FA93A90D31498327C40E6CEA759D6E36AE2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

aspackv2 backdoor discovery bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- Family: Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Detects executables packed with ASPack
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Bdaejec Backdoor.

Family: Bdaejec

Detects executables packed with ASPack

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2