General
- Target 2026-08-09_fe3e75b361d3d50c54cbae0316ff283d_elex_smoke-loader_wannacry_wapomi
- Size 499KB
- Sample260809-wlqmasshmc
- SHA256 d998b21888caf512a83d07f932c4b60bce13b8d658276e07d24b4aec36b0dc23
- MD5 fe3e75b361d3d50c54cbae0316ff283d
- SHA1 d4e7519be5b823b72690994c4aa55edecac3e1d7
- SHA512 eb4eede366296b9bb52c8c9b84bfb297cbbe622c5c7894f15fb069f180ba2c128162255e0d642faf34d19364c8e75a2d856dd448b1241811b1b1f5868a0f8c53
- SSDEEP 6144:6GkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBq:6Gruf026ZlmR70Y/k9VS+LPMR
- TLSH T1AAB4281639FCC73BE3D25530CE6DFB90B0F5B9684F21489736D4191C2A76982E31AA2D
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-09_fe3e75b361d3d50c54cbae0316ff283d_elex_smoke-loader_wannacry_wapomi.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-08-09_fe3e75b361d3d50c54cbae0316ff283d_elex_smoke-loader_wannacry_wapomi
- Size 499KB
- SHA256 d998b21888caf512a83d07f932c4b60bce13b8d658276e07d24b4aec36b0dc23
- MD5 fe3e75b361d3d50c54cbae0316ff283d
- SHA1 d4e7519be5b823b72690994c4aa55edecac3e1d7
- SHA512 eb4eede366296b9bb52c8c9b84bfb297cbbe622c5c7894f15fb069f180ba2c128162255e0d642faf34d19364c8e75a2d856dd448b1241811b1b1f5868a0f8c53
- SSDEEP 6144:6GkNeugsYW02QnZlmR75Yi2X3IQCn3fjA9VZFzUxXOdy/KkicWM+5nXwBq:6Gruf026ZlmR70Y/k9VS+LPMR
- TLSH T1AAB4281639FCC73BE3D25530CE6DFB90B0F5B9684F21489736D4191C2A76982E31AA2D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE