General
- Target 2026-10-02_f4ae8aa653a2851039f52dae27d83c01_elex_smoke-loader_wapomi
- Size 45KB
- Sample261002-2epdjsvalf
- SHA256 ad1fe57b03c91c670f77097235378f6b8d171a3cb0b25c4ab76de5e48f289032
- MD5 f4ae8aa653a2851039f52dae27d83c01
- SHA1 934aa43f7822d05f60a6f633036c0740be426d2e
- SHA512 eeaef2c0c9bc6a5406b3b14759a9ad43faa4ab369391999cdaac66dd6e383d12ddcacccb6dd0758557ecbdd89982bb36d8b795d019a0bff68a6f61910cf9bda7
- SSDEEP 768:OrKwOi0dzM061VDuyEE6ZkRFSLQGPL4vzZq2o9W7GsxBbPr:Or4i0hMHD8P+ssGCq2iW7z
- TLSH T13A233A5197E44539F0F72A3066B52A120F7ABD309E71D3CF969089AA28B9BD0DD70723
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-02_f4ae8aa653a2851039f52dae27d83c01_elex_smoke-loader_wapomi.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-10-02_f4ae8aa653a2851039f52dae27d83c01_elex_smoke-loader_wapomi
- Size 45KB
- SHA256 ad1fe57b03c91c670f77097235378f6b8d171a3cb0b25c4ab76de5e48f289032
- MD5 f4ae8aa653a2851039f52dae27d83c01
- SHA1 934aa43f7822d05f60a6f633036c0740be426d2e
- SHA512 eeaef2c0c9bc6a5406b3b14759a9ad43faa4ab369391999cdaac66dd6e383d12ddcacccb6dd0758557ecbdd89982bb36d8b795d019a0bff68a6f61910cf9bda7
- SSDEEP 768:OrKwOi0dzM061VDuyEE6ZkRFSLQGPL4vzZq2o9W7GsxBbPr:Or4i0hMHD8P+ssGCq2iW7z
- TLSH T13A233A5197E44539F0F72A3066B52A120F7ABD309E71D3CF969089AA28B9BD0DD70723
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.