General
- Target 2026-09-10_525bb2387270a7ae81a91f2689cc3bf3_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_wapomi
- Size 848KB
- Sample260910-vdd3vsek6v
- SHA256 5e015d5c179b331c0fc61429b7fa3660cb2c7857a6216fb53137be157dca4ace
- MD5 525bb2387270a7ae81a91f2689cc3bf3
- SHA1 831aa642c66a25886f95f59bbb7a3118758ab856
- SHA512 e42a72a3b700f00fe698b9d6a87a2ccbf3d80d89489904e1d06c6ad81d806f7d9a8feea059c09705404e65026d104a48e7ade109acf06af8e67a639b844b7674
- SSDEEP 12288:jiOm9Puii4uuBQKOyhBW0FL8I7OVt9Bhgi:hmBW0FL8I7OD3d
- TLSH T18B050801BBB15019F9FB16FA86FF706C9A3DB9E01718A4C752C02AED9625AF07C31617
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-10_525bb2387270a7ae81a91f2689cc3bf3_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_wapomi.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-09-10_525bb2387270a7ae81a91f2689cc3bf3_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_wapomi
- Size 848KB
- SHA256 5e015d5c179b331c0fc61429b7fa3660cb2c7857a6216fb53137be157dca4ace
- MD5 525bb2387270a7ae81a91f2689cc3bf3
- SHA1 831aa642c66a25886f95f59bbb7a3118758ab856
- SHA512 e42a72a3b700f00fe698b9d6a87a2ccbf3d80d89489904e1d06c6ad81d806f7d9a8feea059c09705404e65026d104a48e7ade109acf06af8e67a639b844b7674
- SSDEEP 12288:jiOm9Puii4uuBQKOyhBW0FL8I7OVt9Bhgi:hmBW0FL8I7OD3d
- TLSH T18B050801BBB15019F9FB16FA86FF706C9A3DB9E01718A4C752C02AED9625AF07C31617
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE