Extracted

• • Target

    2024-11-11_8ddb739084cf2fcc79f9a302a0dbfbec_smoke-loader_wapomi

  • Size

    203KB

  • MD5

    8ddb739084cf2fcc79f9a302a0dbfbec

  • SHA1

    5ffd4a807126cfde244743b1358ee85a159f16fa

  • SHA256

    beced194abf465c53f3d1ad81d675c3a702be405439b0deb0058c807c9c02e38

  • SHA512

    e454d593e42d55d1908f7c36635d223fc9a467e9c5bde73c0e8f0c8efca711b34a115af0e37833d7bc6dc8b45f00ecd297d9b85d979fa8eb3bc949e7f5a13713

  • SSDEEP

    3072:v1TlCN3DeL0dA/VkvpS6zpQDt0v2E6LGHxdOWTtDwqytR2TBf9AqqpUwIJGCH:BlGXd4OvDzewKLGHj0qTBlznBM

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2