General
- Target 2026-08-12_707808f95e9d8b2298cd8ec0138d14ef_elex_smoke-loader_wapomi
- Size 45KB
- Sample260813-baqspsycqh
- SHA256 a39e99af8078892efff1a0f638e34413165057e4b027e0e73f3f6348513efb2c
- MD5 707808f95e9d8b2298cd8ec0138d14ef
- SHA1 b0e23fc1278debc7693b7d439f048bb834a7e6c9
- SHA512 343a3c651a7c7103e4ce9f5a76267db6077765bf68a70b6f3159c91bc5fc19f6d527ec38c032b359f51d734f11b568a66b7b3090b14b810950f4c66e713560c0
- SSDEEP 768:OrKwOi0dzM061VDuyEE6ZkRFFtQGPL4vzZq2o9W7GsxBbPr:Or4i0hMHD8P+HaGCq2iW7z
- TLSH T1C2234A5197E44539F0F72A3066B52A120F7ABD309E71D3CF969089AA28B9BD0DD70723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-12_707808f95e9d8b2298cd8ec0138d14ef_elex_smoke-loader_wapomi.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-08-12_707808f95e9d8b2298cd8ec0138d14ef_elex_smoke-loader_wapomi
- Size 45KB
- SHA256 a39e99af8078892efff1a0f638e34413165057e4b027e0e73f3f6348513efb2c
- MD5 707808f95e9d8b2298cd8ec0138d14ef
- SHA1 b0e23fc1278debc7693b7d439f048bb834a7e6c9
- SHA512 343a3c651a7c7103e4ce9f5a76267db6077765bf68a70b6f3159c91bc5fc19f6d527ec38c032b359f51d734f11b568a66b7b3090b14b810950f4c66e713560c0
- SSDEEP 768:OrKwOi0dzM061VDuyEE6ZkRFFtQGPL4vzZq2o9W7GsxBbPr:Or4i0hMHD8P+HaGCq2iW7z
- TLSH T1C2234A5197E44539F0F72A3066B52A120F7ABD309E71D3CF969089AA28B9BD0DD70723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE