General
- Target 2026-10-15_285e0aa6c20026cf88bc4f319f4dc5eb_elex_smoke-loader_wapomi
- Size 38KB
- Sample261016-y7ccxazzat
- SHA256 031ff3f309830901368a82233e04eaa54d3620adeea819ae21419d43db5c7407
- MD5 285e0aa6c20026cf88bc4f319f4dc5eb
- SHA1 a3f8f7722cba26216ef8e7e638d0957ee7a723b9
- SHA512 60df50f2ffc7b463c90a631fd7380e5bc80e661f48d5811ba66821e25c5c6450e96fdeb5f26177176b53b128fa917eb28e6577b120ad09fd42d37fd5cd7fbeeb
- SSDEEP 768:1oEW7d66ka/H8yNojx7yG542eQGPL4vzZq2o9W7GsxBbPr:1dW7d66ka/H8NgG5DlGCq2iW7z
- TLSH T1D1037C47EFC1CA77C559A8B40E62B5ABC62BE1306F2191E7EBD408A510E5CD0BC6D80F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-15_285e0aa6c20026cf88bc4f319f4dc5eb_elex_smoke-loader_wapomi.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Extracted
Family
-
bdaejec
C2
-
ddos.dnsnb8.net
Targets
-
- Target 2026-10-15_285e0aa6c20026cf88bc4f319f4dc5eb_elex_smoke-loader_wapomi
- Size 38KB
- SHA256 031ff3f309830901368a82233e04eaa54d3620adeea819ae21419d43db5c7407
- MD5 285e0aa6c20026cf88bc4f319f4dc5eb
- SHA1 a3f8f7722cba26216ef8e7e638d0957ee7a723b9
- SHA512 60df50f2ffc7b463c90a631fd7380e5bc80e661f48d5811ba66821e25c5c6450e96fdeb5f26177176b53b128fa917eb28e6577b120ad09fd42d37fd5cd7fbeeb
- SSDEEP 768:1oEW7d66ka/H8yNojx7yG542eQGPL4vzZq2o9W7GsxBbPr:1dW7d66ka/H8NgG5DlGCq2iW7z
- TLSH T1D1037C47EFC1CA77C559A8B40E62B5ABC62BE1306F2191E7EBD408A510E5CD0BC6D80F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Bdaejec Backdoor.
Bdaejec is backdoor written in C++.
-
Detects executables packed with ASPack
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE