bdaejec | 32adadf9164bc5ed95732071ae6d39c6dcb01c91435f115e5b9464e097b48771

General

Target
2026-07-09_e942a2c07d3b5b697701370b10233a05_elex_rhadamanthys_smoke-loader_wapomi
Size 76KB
Sample260709-xetaaaf15r
SHA256 32adadf9164bc5ed95732071ae6d39c6dcb01c91435f115e5b9464e097b48771
MD5 e942a2c07d3b5b697701370b10233a05
SHA1 3f74d87d124d8f12d7267b0887e80f894622477f
SHA512 d1b3cef11f071acf186466fe0e3a9e4e968bd9cc7f4553fe6ecb0a6761dbd84765c2b782fb6831cdbf20e3c53f2589943d215a28ca96057cb366540799a66431
SSDEEP 768:n4xBubCQQ662jf8z4BgZ509/njuyhtnX+om3X6QGPL4vzZq2o9W7GsxBbPr:n4TubCkRB+CPj/Oom3X5GCq2iW7z
TLSH
T15C73CF1B7ED680B3C98600F101A24F7BABBB9571067057978B20D56F3E71E64CD3B185
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  2026-07-09_e942a2c07d3b5b697701370b10233a05_elex_rhadamanthys_smoke-loader_wapomi
- Size 76KB
- SHA256 32adadf9164bc5ed95732071ae6d39c6dcb01c91435f115e5b9464e097b48771
- MD5 e942a2c07d3b5b697701370b10233a05
- SHA1 3f74d87d124d8f12d7267b0887e80f894622477f
- SHA512 d1b3cef11f071acf186466fe0e3a9e4e968bd9cc7f4553fe6ecb0a6761dbd84765c2b782fb6831cdbf20e3c53f2589943d215a28ca96057cb366540799a66431
- SSDEEP 768:n4xBubCQQ662jf8z4BgZ509/njuyhtnX+om3X6QGPL4vzZq2o9W7GsxBbPr:n4TubCkRB+CPj/Oom3X5GCq2iW7z
- TLSH
  T15C73CF1B7ED680B3C98600F101A24F7BABBB9571067057978B20D56F3E71E64CD3B185
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

aspackv2 backdoor discovery bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- Family: Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Detects executables packed with ASPack
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Bdaejec Backdoor.

Family: Bdaejec

Detects executables packed with ASPack

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2