Extracted

• • Target

    2024-11-19_37b63a9aa08a645d62157eaffd5e817f_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    37b63a9aa08a645d62157eaffd5e817f

  • SHA1

    040df34f8ae271f22c894ad1f328017697d43584

  • SHA256

    535a1981f7a3cae68df3ee1fa7569e93ef3497f2e26c81e4638bfdffa06b738e

  • SHA512

    781710122eef555a2507b909561d52b8fe40670226522e87b0cfb6cc68f6aa97739558351319ad04bf7dc3236f37dc28a9a80ac5e26e8897060a6fb46a6b06dc

  • SSDEEP

    1536:fHB0UxMkzOt7HcvJGt5AdHIOWnToIf12ZXPGCq2iW7z:fhAWJGSCTBf12ZfGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2