General
- Target 2026-07-14_78131ad077332eddbfd1ce00f9535857_amadey_elex_smoke-loader_wapomi
- Size 35KB
- Sample260714-vbnvaagy9m
- SHA256 ecb29df55ed568f28cfebaa61529e651ab2ac53b83a81925c4f1aa46106174bd
- MD5 78131ad077332eddbfd1ce00f9535857
- SHA1 4e3ca858debd7ce79b1ad9bbc5da376b5c0d99f8
- SHA512 68f4a286f4abf88477c3ee67254ac502f8bd93a93ac62628026fa470e70f341892c1d4433d6bee9359daf69af8b805d9dbb88ff9c7986ad48f7f6bbc327751fa
- SSDEEP 768:mo4hEC1vqUHVO5fwQdKauQGPL4vzZq2o9W7GsxBbPr:949YMVKfwQQaVGCq2iW7z
- TLSH T1F9F27D32CA840577C489253218297913CF6DAE70FF6C75E3A05C44D92A7AFA2DCB46DD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-07-14_78131ad077332eddbfd1ce00f9535857_amadey_elex_smoke-loader_wapomi
- Size 35KB
- SHA256 ecb29df55ed568f28cfebaa61529e651ab2ac53b83a81925c4f1aa46106174bd
- MD5 78131ad077332eddbfd1ce00f9535857
- SHA1 4e3ca858debd7ce79b1ad9bbc5da376b5c0d99f8
- SHA512 68f4a286f4abf88477c3ee67254ac502f8bd93a93ac62628026fa470e70f341892c1d4433d6bee9359daf69af8b805d9dbb88ff9c7986ad48f7f6bbc327751fa
- SSDEEP 768:mo4hEC1vqUHVO5fwQdKauQGPL4vzZq2o9W7GsxBbPr:949YMVKfwQQaVGCq2iW7z
- TLSH T1F9F27D32CA840577C489253218297913CF6DAE70FF6C75E3A05C44D92A7AFA2DCB46DD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE