General
- Target 2026-08-21_7dad657358fe70ecb6d5f0d1d4d0adef_elex_smoke-loader_wapomi
- Size 97KB
- Sample260822-n4eczseh74
- SHA256 e55c0652e59eff9a6fd949955143cc1d520365142c6135497002fc2e7ba1dfbc
- MD5 7dad657358fe70ecb6d5f0d1d4d0adef
- SHA1 b045460d0bae55842edcfe1b5145428f09f65bea
- SHA512 daa80c722e93d3d9f802fed82e0e72ad5a1dd881a2099c160bcc2490ba00742688aed0285710922cf0aa90cfdd6773f657494b10759b93430081d0acf0706197
- SSDEEP 3072:BemGTC0bZCwU8xtuOG/DfdxU9Fo9x7/Y4GCH:oiIuOG/o9+9VC
- TLSH T118A38E27A5418465C6E1D370317EBB4382AAFB701B6CA6D3E3904E3E14B17D6CE3925B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-21_7dad657358fe70ecb6d5f0d1d4d0adef_elex_smoke-loader_wapomi.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-08-21_7dad657358fe70ecb6d5f0d1d4d0adef_elex_smoke-loader_wapomi
- Size 97KB
- SHA256 e55c0652e59eff9a6fd949955143cc1d520365142c6135497002fc2e7ba1dfbc
- MD5 7dad657358fe70ecb6d5f0d1d4d0adef
- SHA1 b045460d0bae55842edcfe1b5145428f09f65bea
- SHA512 daa80c722e93d3d9f802fed82e0e72ad5a1dd881a2099c160bcc2490ba00742688aed0285710922cf0aa90cfdd6773f657494b10759b93430081d0acf0706197
- SSDEEP 3072:BemGTC0bZCwU8xtuOG/DfdxU9Fo9x7/Y4GCH:oiIuOG/o9+9VC
- TLSH T118A38E27A5418465C6E1D370317EBB4382AAFB701B6CA6D3E3904E3E14B17D6CE3925B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE