General
- Target 2026-08-10_d82021b7971e1d323e6ad4ad3935abb9_elex_smoke-loader_wapomi
- Size 72KB
- Sample260810-nrbfkagl8t
- SHA256 0912f382cad9ed2ad8edd4194feb6a83ed653432a61700fa31f452d3c1137da5
- MD5 d82021b7971e1d323e6ad4ad3935abb9
- SHA1 64b6c0e2b905e58de23bf64db76ebc4b786569a9
- SHA512 4d0bcb61e2409abbe330a329868c22e26f8c2f0194f748e0d486506305a0be7f10a2083264ce50971a37106d5a6b5d212b65008626e73e61a848ca091d21c173
- SSDEEP 1536:RJF4NodplWWMn8VoLRHIUjhlqxXqj3GCq2iW7z:R7NpLePVIglAXmGCH
- TLSH T1F3737CC7A684903EC4C30071656D77624EFE9C701B2873CBD3964A96E8686D8E5FE21F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-10_d82021b7971e1d323e6ad4ad3935abb9_elex_smoke-loader_wapomi.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-08-10_d82021b7971e1d323e6ad4ad3935abb9_elex_smoke-loader_wapomi
- Size 72KB
- SHA256 0912f382cad9ed2ad8edd4194feb6a83ed653432a61700fa31f452d3c1137da5
- MD5 d82021b7971e1d323e6ad4ad3935abb9
- SHA1 64b6c0e2b905e58de23bf64db76ebc4b786569a9
- SHA512 4d0bcb61e2409abbe330a329868c22e26f8c2f0194f748e0d486506305a0be7f10a2083264ce50971a37106d5a6b5d212b65008626e73e61a848ca091d21c173
- SSDEEP 1536:RJF4NodplWWMn8VoLRHIUjhlqxXqj3GCq2iW7z:R7NpLePVIglAXmGCH
- TLSH T1F3737CC7A684903EC4C30071656D77624EFE9C701B2873CBD3964A96E8686D8E5FE21F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE