bdaejec | befe6179a76dc5cc8cb59287d3a827b43aff9545b323d440a10f6eabfa32cb09

General

Target
2026-07-16_8d0c9e606847e0623dd170bd44ad0e64_elex_smoke-loader_wapomi
Size 34KB
Sample260716-tkpx9scx9v
SHA256 befe6179a76dc5cc8cb59287d3a827b43aff9545b323d440a10f6eabfa32cb09
MD5 8d0c9e606847e0623dd170bd44ad0e64
SHA1 bc099722b29284207d4e37f42b5ec55b67844d0b
SHA512 4b62b72b324d04438dcb1464a7b12a4038e196e5a21e70985da96590e8af270bae66b919967f19612eb5eb748a98831d9d43e76064b6642f9780b02268743d84
SSDEEP 768:iuEKAtywwY0sv2+sPvm7CnY6QGPL4vzZq2o9W7GsxBbPr:uxtyDse+sXW5GCq2iW7z
TLSH
T195F29E43DB9028F1CB8025B1407279D699BF9D30CB41BDD78FA594660964AF0EDFF84A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

bdaejec

C2

ddos.dnsnb8.net

Targets

- Target
  2026-07-16_8d0c9e606847e0623dd170bd44ad0e64_elex_smoke-loader_wapomi
- Size 34KB
- SHA256 befe6179a76dc5cc8cb59287d3a827b43aff9545b323d440a10f6eabfa32cb09
- MD5 8d0c9e606847e0623dd170bd44ad0e64
- SHA1 bc099722b29284207d4e37f42b5ec55b67844d0b
- SHA512 4b62b72b324d04438dcb1464a7b12a4038e196e5a21e70985da96590e8af270bae66b919967f19612eb5eb748a98831d9d43e76064b6642f9780b02268743d84
- SSDEEP 768:iuEKAtywwY0sv2+sPvm7CnY6QGPL4vzZq2o9W7GsxBbPr:uxtyDse+sXW5GCq2iW7z
- TLSH
  T195F29E43DB9028F1CB8025B1407279D699BF9D30CB41BDD78FA594660964AF0EDFF84A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

aspackv2 backdoor discovery bdaejec
- Detects Bdaejec Backdoor.
  Bdaejec is backdoor written in C++.
- Family: Bdaejec
  Bdaejec is a backdoor written in C++.
  backdoor bdaejec
- Detects executables packed with ASPack
- ASPack v2.12-2.42
  Detects executables packed with ASPack v2.12-2.42
  aspackv2
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1

T1012

System Information Discovery

2

T1082

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Bdaejec Backdoor.

Family: Bdaejec

Detects executables packed with ASPack

ASPack v2.12-2.42

Checks computer location settings

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2