bdaejec | 44631867279d34506bae6ddddb9fb3668af59efcc6897a7d6011b127cdc5a3a9

General

Target
2026-07-11_83d41b4f05125d0ba5636314e60de08c_elex_rhadamanthys_smoke-loader_stop_tofsee_wapomi
Size 208KB
Sample260711-td8f2ags3s
SHA256 44631867279d34506bae6ddddb9fb3668af59efcc6897a7d6011b127cdc5a3a9
MD5 83d41b4f05125d0ba5636314e60de08c
SHA1 6eabf263ec3c9a3240e046296f15beb640ddddfc
SHA512 ffc374f070ee39026809a273b545d6c2e66bc6557a7e17fae9ee8f331c611815a203f14609c8b5c36df7501032e9c70e668ecf6221a74fb10108c54ef8de6cee
SSDEEP 3072:LW8KaJvnsgaSIwi/cJimz+zQzBYTBf9pAXAZPuYQONGCH:Qkv1IHyz+zQeTBl2Muy4
TLSH
T190248C2072C0C073C063247641B5C7F59EBB78755A65AA8BBBCB1FB90F252D2DA2934D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  2026-07-11_83d41b4f05125d0ba5636314e60de08c_elex_rhadamanthys_smoke-loader_stop_tofsee_wapomi
- Size 208KB
- SHA256 44631867279d34506bae6ddddb9fb3668af59efcc6897a7d6011b127cdc5a3a9
- MD5 83d41b4f05125d0ba5636314e60de08c
- SHA1 6eabf263ec3c9a3240e046296f15beb640ddddfc
- SHA512 ffc374f070ee39026809a273b545d6c2e66bc6557a7e17fae9ee8f331c611815a203f14609c8b5c36df7501032e9c70e668ecf6221a74fb10108c54ef8de6cee
- SSDEEP 3072:LW8KaJvnsgaSIwi/cJimz+zQzBYTBf9pAXAZPuYQONGCH:Qkv1IHyz+zQeTBl2Muy4
- TLSH
  T190248C2072C0C073C063247641B5C7F59EBB78755A65AA8BBBCB1FB90F252D2DA2934D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

aspackv2 backdoor discovery bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- Family: Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Detects executables packed with ASPack
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Bdaejec Backdoor.

Family: Bdaejec

Detects executables packed with ASPack

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2