General
- Target 2026-08-14_d31d8d0794dc0a8b833e1a9a5f07202a_elex_keygen_smoke-loader_wapomi
- Size 138KB
- Sample260814-pl42cshe37
- SHA256 b1eaf935a3ed87d1651e05d7a95b49a8a0b024c5e715720dc4786989840c1c53
- MD5 d31d8d0794dc0a8b833e1a9a5f07202a
- SHA1 f9b40b52156e5fd1c7a4cff3e500cc1fb05a0e10
- SHA512 316f844a197d5c9f1ddb6183436506f33806f87d39f9c8881d7be935e9c3779cc19a52d1a0948f9e589e642a28a0f7f4fd387d96b2f8dda4125b31a137ba88bf
- SSDEEP 3072:mQWlzgYsAuAhHXVzGWZe3lChQK5SsOoY4oSiGCH:mQWK+XVzWAi2vJD
- TLSH T11ED31236CA430907D9D43532508321F45EBED933F6A963DF399CC8B62E31A0F6A38664
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-14_d31d8d0794dc0a8b833e1a9a5f07202a_elex_keygen_smoke-loader_wapomi.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-08-14_d31d8d0794dc0a8b833e1a9a5f07202a_elex_keygen_smoke-loader_wapomi
- Size 138KB
- SHA256 b1eaf935a3ed87d1651e05d7a95b49a8a0b024c5e715720dc4786989840c1c53
- MD5 d31d8d0794dc0a8b833e1a9a5f07202a
- SHA1 f9b40b52156e5fd1c7a4cff3e500cc1fb05a0e10
- SHA512 316f844a197d5c9f1ddb6183436506f33806f87d39f9c8881d7be935e9c3779cc19a52d1a0948f9e589e642a28a0f7f4fd387d96b2f8dda4125b31a137ba88bf
- SSDEEP 3072:mQWlzgYsAuAhHXVzGWZe3lChQK5SsOoY4oSiGCH:mQWK+XVzWAi2vJD
- TLSH T11ED31236CA430907D9D43532508321F45EBED933F6A963DF399CC8B62E31A0F6A38664
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL