General
- Target 2026-08-09_456692cfc7e01763c7241a40fd617af7_elex_smoke-loader_wapomi
- Size 28KB
- Sample260809-vfegeaam8w
- SHA256 dfece91cdbf8564546afdf7b22f060f3447370d189a51622f689733024f3bf7e
- MD5 456692cfc7e01763c7241a40fd617af7
- SHA1 971ee52a5d24412a3e212d613c3427404368fb5c
- SHA512 b6e4da970100c378616ce3fb9e95cf9de30ef1ca94e02dd7d3f064181ae53dad519f2ca1363c9fb42ea37adf423734f0ddbe34f50ccbd05b63c077018927ae34
- SSDEEP 768:NqPc+Cdk57a80QGPL4vzZq2o9W7GsxBbPr:0HCdkDnGCq2iW7z
- TLSH T186D2A083DFC04CF7CA9D22330033627BC7BB957147B69567579184261D79A54FC2A0AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_456692cfc7e01763c7241a40fd617af7_elex_smoke-loader_wapomi.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-08-09_456692cfc7e01763c7241a40fd617af7_elex_smoke-loader_wapomi
- Size 28KB
- SHA256 dfece91cdbf8564546afdf7b22f060f3447370d189a51622f689733024f3bf7e
- MD5 456692cfc7e01763c7241a40fd617af7
- SHA1 971ee52a5d24412a3e212d613c3427404368fb5c
- SHA512 b6e4da970100c378616ce3fb9e95cf9de30ef1ca94e02dd7d3f064181ae53dad519f2ca1363c9fb42ea37adf423734f0ddbe34f50ccbd05b63c077018927ae34
- SSDEEP 768:NqPc+Cdk57a80QGPL4vzZq2o9W7GsxBbPr:0HCdkDnGCq2iW7z
- TLSH T186D2A083DFC04CF7CA9D22330033627BC7BB957147B69567579184261D79A54FC2A0AE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE