Extracted

• • Target

    2024-11-20_9e4f756cfaf1d42871e694cf1a9eb5ad_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    9e4f756cfaf1d42871e694cf1a9eb5ad

  • SHA1

    4072bfb253f18b2f7cc1a8deb389d6f6342b2996

  • SHA256

    a18899c8b4cf9147b8e5be37bdff0f98b262f0b5b4ab30f9199afba56616399e

  • SHA512

    ed9b7b5244e44e2db5094cda81ba0f1562a73cd6d83bcd10b610b8baf565eed758660f29106256e5568f2cc43152730a02db5d4e083e0820d0eef07bf1bbce28

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQflGCq2iW7z:Y3ysTGhQ9GCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2