General

  • Target
    2026-09-25_979f34b487ed6a02d05219deb663ae93_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi
  • Size 205KB
  • Sample260925-2e2nwayanc
  • SHA256 8815488b52c91f82020914c12702057abc2ad805aee81f2ebb438b396b16bd07
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • bdaejec

C2
  • ddos.dnsnb8.net

Targets

    • Target
      2026-09-25_979f34b487ed6a02d05219deb663ae93_elex_rhadamanthys_smoke-loader_stealc_stop_tofsee_wapomi
    • Size 205KB
    • SHA256 8815488b52c91f82020914c12702057abc2ad805aee81f2ebb438b396b16bd07
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Bdaejec Backdoor.

      Bdaejec is backdoor written in C++.

    • Detects Stealc stealer Version 3

    • Family: Bdaejec

      Bdaejec is a backdoor written in C++.

    • Family: Stealc

      Stealc is an infostealer written in C++.

    • Detects executables packed with ASPack

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks