General
- Target 2026-08-25_d4f71af3d5d2c6bd2e065387f0a92101_elex_smoke-loader_wapomi
- Size 93KB
- Sample260826-jdavnavajd
- SHA256 4b48b6791336ae7826391597b139919a52888ce2c358ababa228d5d2454f04e1
- MD5 d4f71af3d5d2c6bd2e065387f0a92101
- SHA1 122ca86655208089b012a65c59d725d78289ac89
- SHA512 522ec7d15273901033e619e80dbbcd122de6d99e1e568fecf55aada9e2235274f5a6b8a336fdada7a24e18f8ef2289632437cf628cc4511d2edcd3238fae2126
- SSDEEP 1536:yH8f1akb/kQptHuXF4O7WjbARQnGCq2iW7z:ycf1a68Q/O1RWj+6GCH
- TLSH T18B930E0267E88619F5F73A3029B952310E777CA19E3CD68D0289915D1BF3E80DD78BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-25_d4f71af3d5d2c6bd2e065387f0a92101_elex_smoke-loader_wapomi.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-08-25_d4f71af3d5d2c6bd2e065387f0a92101_elex_smoke-loader_wapomi
- Size 93KB
- SHA256 4b48b6791336ae7826391597b139919a52888ce2c358ababa228d5d2454f04e1
- MD5 d4f71af3d5d2c6bd2e065387f0a92101
- SHA1 122ca86655208089b012a65c59d725d78289ac89
- SHA512 522ec7d15273901033e619e80dbbcd122de6d99e1e568fecf55aada9e2235274f5a6b8a336fdada7a24e18f8ef2289632437cf628cc4511d2edcd3238fae2126
- SSDEEP 1536:yH8f1akb/kQptHuXF4O7WjbARQnGCq2iW7z:ycf1a68Q/O1RWj+6GCH
- TLSH T18B930E0267E88619F5F73A3029B952310E777CA19E3CD68D0289915D1BF3E80DD78BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE