bdaejec | 3817dd4defe78a68938096de20cce85e0e3b0ba8f4a1db4a1755e0d9d67ac187

General

Target
2026-07-11_bedba037d161573b98b0a9a66694c93f_elex_smoke-loader_wapomi
Size 62KB
Sample260711-ss3zesdx5p
SHA256 3817dd4defe78a68938096de20cce85e0e3b0ba8f4a1db4a1755e0d9d67ac187
MD5 bedba037d161573b98b0a9a66694c93f
SHA1 e1b09f0656c7b95ae2b66d6b117483140004a746
SHA512 651e970c5e903be1e765abf3de8ae90a7751eed94db4e779adef55e3bbb8b29802a12b15a5b916e81cfafa30cd71187935870e7ef941176287b4ffdc32a6095b
SSDEEP 768:MEcy9908dqax/5FdC72/WkFkwUEihlLBHCnp+KCIeyQGPL4vzZq2o9W7GsxBbPr:Vcy9Pn/LdnFFlUEulEleBGCq2iW7z
TLSH
T163536C136AC0903BC4D30136656E33228AFDA470472977CBF39E4A91ABA56D5F437B4B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  2026-07-11_bedba037d161573b98b0a9a66694c93f_elex_smoke-loader_wapomi
- Size 62KB
- SHA256 3817dd4defe78a68938096de20cce85e0e3b0ba8f4a1db4a1755e0d9d67ac187
- MD5 bedba037d161573b98b0a9a66694c93f
- SHA1 e1b09f0656c7b95ae2b66d6b117483140004a746
- SHA512 651e970c5e903be1e765abf3de8ae90a7751eed94db4e779adef55e3bbb8b29802a12b15a5b916e81cfafa30cd71187935870e7ef941176287b4ffdc32a6095b
- SSDEEP 768:MEcy9908dqax/5FdC72/WkFkwUEihlLBHCnp+KCIeyQGPL4vzZq2o9W7GsxBbPr:Vcy9Pn/LdnFFlUEulEleBGCq2iW7z
- TLSH
  T163536C136AC0903BC4D30136656E33228AFDA470472977CBF39E4A91ABA56D5F437B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

aspackv2 backdoor discovery bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- Family: Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Detects executables packed with ASPack
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Bdaejec Backdoor.

Family: Bdaejec

Detects executables packed with ASPack

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2