bdaejec | 9504b30be9e26787daaefaf2bd0000214ca7208a0cfa03771de7955fa4e61d6b

General

Target
2026-07-11_549ebc89d4d7d47b6cdfc9cf789672bc_elex_smoke-loader_stealc_tofsee_wapomi
Size 388KB
Sample260711-tx5t9agy3s
SHA256 9504b30be9e26787daaefaf2bd0000214ca7208a0cfa03771de7955fa4e61d6b
MD5 549ebc89d4d7d47b6cdfc9cf789672bc
SHA1 080ceea72ec994d4f83e1691d8deddac41400364
SHA512 2beaef181890f030d8f23e04eff2da5fedb612081d9e8bdb975e5901cc5fa5c88f94ba909bcc585d36acf5fdba1ad1b63b35a88ce24715477dc1a3740165c7ad
SSDEEP 6144:XuAv6m52ecWm1BjPCWmZpIlfDrQhc8zMnLG74BPh7:XuAaZNCWmZpIlfDrQDzMnLG72
TLSH
T11B849DB22281C071C81442B96497ABB5ABBCB522237164E733DC49F95F5C3F4BA3964F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  2026-07-11_549ebc89d4d7d47b6cdfc9cf789672bc_elex_smoke-loader_stealc_tofsee_wapomi
- Size 388KB
- SHA256 9504b30be9e26787daaefaf2bd0000214ca7208a0cfa03771de7955fa4e61d6b
- MD5 549ebc89d4d7d47b6cdfc9cf789672bc
- SHA1 080ceea72ec994d4f83e1691d8deddac41400364
- SHA512 2beaef181890f030d8f23e04eff2da5fedb612081d9e8bdb975e5901cc5fa5c88f94ba909bcc585d36acf5fdba1ad1b63b35a88ce24715477dc1a3740165c7ad
- SSDEEP 6144:XuAv6m52ecWm1BjPCWmZpIlfDrQhc8zMnLG74BPh7:XuAaZNCWmZpIlfDrQDzMnLG72
- TLSH
  T11B849DB22281C071C81442B96497ABB5ABBCB522237164E733DC49F95F5C3F4BA3964F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

aspackv2 backdoor discovery bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- Family: Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Detects executables packed with ASPack
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Bdaejec Backdoor.

Family: Bdaejec

Detects executables packed with ASPack

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2