General
- Target 2026-07-15_6dd70f7ed04b2645a369fa12ed4bed6c_amadey_elex_smoke-loader_wapomi
- Size 493KB
- Sample260715-vg4spahs5k
- SHA256 705b5d2e48603c78ee0f74087c9cfe7a3665de1f4d9b4cadc1c1789796039673
- MD5 6dd70f7ed04b2645a369fa12ed4bed6c
- SHA1 1095a3b4dcc29223d5e7ca9bf0cb5067f447c895
- SHA512 5d9f30d6f49d10b9d4c53837bdbea4b1df2ab2067e1876445ae928ea9fba46d4f526101380bce90dfc19a2b8f9bfa8af5f0378dd7d40c3331c07510219d04e59
- SSDEEP 6144:o2t6Nk3tbvB5thn3FOzZlA9qB8/q7YCDhZ7uXPluxmS:o2t6N4J5715QB8S7JkMxm
- TLSH T133B44B1377C44831F6A3023249AB12A6456BBC212FB297CB57E4727EAE71FC17930796
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-07-15_6dd70f7ed04b2645a369fa12ed4bed6c_amadey_elex_smoke-loader_wapomi
- Size 493KB
- SHA256 705b5d2e48603c78ee0f74087c9cfe7a3665de1f4d9b4cadc1c1789796039673
- MD5 6dd70f7ed04b2645a369fa12ed4bed6c
- SHA1 1095a3b4dcc29223d5e7ca9bf0cb5067f447c895
- SHA512 5d9f30d6f49d10b9d4c53837bdbea4b1df2ab2067e1876445ae928ea9fba46d4f526101380bce90dfc19a2b8f9bfa8af5f0378dd7d40c3331c07510219d04e59
- SSDEEP 6144:o2t6Nk3tbvB5thn3FOzZlA9qB8/q7YCDhZ7uXPluxmS:o2t6N4J5715QB8S7JkMxm
- TLSH T133B44B1377C44831F6A3023249AB12A6456BBC212FB297CB57E4727EAE71FC17930796
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE