bdaejec | bca7574f01bcc58ccdab2cadb218d0cd525a61adf3433bb151631f1ab5551a43

General

Target
2026-07-12_5ea348a915ed04074cf7988372537b13_elex_smoke-loader_stop_wapomi
Size 504KB
Sample260712-lc6l2shv71
SHA256 bca7574f01bcc58ccdab2cadb218d0cd525a61adf3433bb151631f1ab5551a43
MD5 5ea348a915ed04074cf7988372537b13
SHA1 4d704812783bd2e84e9c04e6d038138bcf8939db
SHA512 056f1e63dbb1df63d55111aaaab9a0f1b823b79d3c94c923cb36a555a3f7552f2fcc50dad5eabc47ebe70cdcb5a7d79b8bb5a35bf499b90552a76a7ddd546aea
SSDEEP 6144:ZJX1J4ZuthOv0fVJMqzBepcUgy9AxoGPFqI4jMjcIZLX/aMidwfP0eaX6TJT:ZJX1J4ZuthvxBQcUgyMooqDgjcEWq
TLSH
T15BB49D353BF2D1B1CA05A1F015BAC76765B666262B352ECFE7D40D096E283E01E3E2D4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  2026-07-12_5ea348a915ed04074cf7988372537b13_elex_smoke-loader_stop_wapomi
- Size 504KB
- SHA256 bca7574f01bcc58ccdab2cadb218d0cd525a61adf3433bb151631f1ab5551a43
- MD5 5ea348a915ed04074cf7988372537b13
- SHA1 4d704812783bd2e84e9c04e6d038138bcf8939db
- SHA512 056f1e63dbb1df63d55111aaaab9a0f1b823b79d3c94c923cb36a555a3f7552f2fcc50dad5eabc47ebe70cdcb5a7d79b8bb5a35bf499b90552a76a7ddd546aea
- SSDEEP 6144:ZJX1J4ZuthOv0fVJMqzBepcUgy9AxoGPFqI4jMjcIZLX/aMidwfP0eaX6TJT:ZJX1J4ZuthvxBQcUgyMooqDgjcEWq
- TLSH
  T15BB49D353BF2D1B1CA05A1F015BAC76765B666262B352ECFE7D40D096E283E01E3E2D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

aspackv2 backdoor discovery bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- Family: Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Detects executables packed with ASPack
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Bdaejec Backdoor.

Family: Bdaejec

Detects executables packed with ASPack

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2