General
- Target 2026-08-13_6da1a10eb26a044530c26febeb3220d6_elex_smoke-loader_wapomi
- Size 24KB
- Sample260813-k9w87swdnf
- SHA256 0cd001ea0de541a241659d7440139ab5072958bdec3dc0e9f0ff6e6fb06552ae
- MD5 6da1a10eb26a044530c26febeb3220d6
- SHA1 9645ef83551b2d186ec2c6e4b27d0c6ac3371cc7
- SHA512 7475bd6f2f66368a33014e7c3d79f39895c6d8c99b8a88ce97e355659de72f7ae42e1ecd34043b66e79c41fa28556847eb4be6e7b6257939bfd7027fd7eebff0
- SSDEEP 384:u/XRkdg4VwL6SYXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:EXahQwQGPL4vzZq2o9W7GsxBbPr
- TLSH T113B2C0234E8088B2C0DC347151F5661BDFBF90B067AA61FB75B7C4F69A6CB00AC67615
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-13_6da1a10eb26a044530c26febeb3220d6_elex_smoke-loader_wapomi.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-08-13_6da1a10eb26a044530c26febeb3220d6_elex_smoke-loader_wapomi
- Size 24KB
- SHA256 0cd001ea0de541a241659d7440139ab5072958bdec3dc0e9f0ff6e6fb06552ae
- MD5 6da1a10eb26a044530c26febeb3220d6
- SHA1 9645ef83551b2d186ec2c6e4b27d0c6ac3371cc7
- SHA512 7475bd6f2f66368a33014e7c3d79f39895c6d8c99b8a88ce97e355659de72f7ae42e1ecd34043b66e79c41fa28556847eb4be6e7b6257939bfd7027fd7eebff0
- SSDEEP 384:u/XRkdg4VwL6SYXZQaD7U8iu4YsAa7ZA0UvH2lsRv21yW7GbAxur6+Y9PffPz:EXahQwQGPL4vzZq2o9W7GsxBbPr
- TLSH T113B2C0234E8088B2C0DC347151F5661BDFBF90B067AA61FB75B7C4F69A6CB00AC67615
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE