Extracted

• • Target

    2024-11-16_faedf3892240d53f90f9bcf78fd324d7_smoke-loader_wapomi

  • Size

    1.2MB

  • MD5

    faedf3892240d53f90f9bcf78fd324d7

  • SHA1

    6f1bd6eaa9c3cf427436b2b6bf5b25e26e302b58

  • SHA256

    e036142e30af1b353e3fb1a0e58c01471821523110406c074ce1b8daad6387a4

  • SHA512

    aec282ce52d4186af7a7cf79272bfa94f738381b3107e6014f96798964c8c3557de4dd8799b81c87b3f90024f900bc45bece7c80b30058cd7938b9ecddd45434

  • SSDEEP

    24576:07GO7dtrjrICw9XuXo7beSTdt5xbX02uvfTXfBxrj3d5E/jKQvVj4YpdjYY0td78:1EtnrICSooGSTD5xbX022fjBxrj3

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2