Extracted

• • Target

    2024-11-11_82207cb22e4d68a54c2218ff1b177129_smoke-loader_wapomi

  • Size

    203KB

  • MD5

    82207cb22e4d68a54c2218ff1b177129

  • SHA1

    579d0f506009979b444a0243073f79787f245a73

  • SHA256

    ab1e20899a67c7ae2a4d352037cea0f7675fba7c481652c5ff52d6cb10c2d01a

  • SHA512

    2546b7e2fea9983831a2a911ec5182e42fa266b5774b52be5b168c193934e9739a8af1938eeffabe0033ec9ed74da1d984ff7ff1c28819ce32f7df25f1e14028

  • SSDEEP

    3072:v1TlCN3DeL0dA/VkvpS6zpQDt0v2E6LGHxdOWTtDwqytR2TBf9AqqpUwI1GCH:BlGXd4OvDzewKLGHj0qTBlznBw

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2