General
- Target 2026-06-30_06687dd7b0cc36f59242de672625cd81_elex_smoke-loader_wannacry_wapomi
- Size 88KB
- Sample260701-beek8sby2q
- SHA256 e61383b4e716187209a6cbdfd60b12a74ec6affcfa482950a7bb71635bc8df6a
- MD5 06687dd7b0cc36f59242de672625cd81
- SHA1 e15249ca7e3fde89f172781b889b5c624e114d4a
- SHA512 8f5af4ddda05d7be97b8e7c8a95737f737c19ad6c296910629246005f6f33111504f327c9cdc87c35088ec37b5f3c55947311e797c8f2ab651f4518ede031033
- SSDEEP 1536:odzmYEMLNkMPJ8sl0aohytu5IsaGCq2iW7z:odzKMLN/J8k0aohyt4IPGCH
- TLSH T191937D03AAC10CF1E8696470057937B7EA33A9951B645BD7A714EEEE1873690FC3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-30_06687dd7b0cc36f59242de672625cd81_elex_smoke-loader_wannacry_wapomi.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-06-30_06687dd7b0cc36f59242de672625cd81_elex_smoke-loader_wannacry_wapomi
- Size 88KB
- SHA256 e61383b4e716187209a6cbdfd60b12a74ec6affcfa482950a7bb71635bc8df6a
- MD5 06687dd7b0cc36f59242de672625cd81
- SHA1 e15249ca7e3fde89f172781b889b5c624e114d4a
- SHA512 8f5af4ddda05d7be97b8e7c8a95737f737c19ad6c296910629246005f6f33111504f327c9cdc87c35088ec37b5f3c55947311e797c8f2ab651f4518ede031033
- SSDEEP 1536:odzmYEMLNkMPJ8sl0aohytu5IsaGCq2iW7z:odzKMLN/J8k0aohyt4IPGCH
- TLSH T191937D03AAC10CF1E8696470057937B7EA33A9951B645BD7A714EEEE1873690FC3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE