Extracted

• • Target

    2024-11-11_542b24f303eadd347379352dfcfffbaa_smoke-loader_wapomi

  • Size

    208KB

  • MD5

    542b24f303eadd347379352dfcfffbaa

  • SHA1

    b3217d79cc44e63817ee3037fc95a2a393e6553e

  • SHA256

    36f08aa842b4cb0c13ba9faef2a5249f8041db6d490656b03b3efe828e08dff3

  • SHA512

    cbd5ce0fa00bf65b63a16495dfb3ff46a4e079ace3149869f0fcd556d69caa2816835cc193966710d7a256a2be2410836ee83db63a86b2657da97094a8f2141e

  • SSDEEP

    3072:LW8KaJvnsgaSIwi/cJimz+zQzBYTBf9pAXAZPuYQO6GCH:Qkv1IHyz+zQeTBl2MuyL

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2