Extracted

• • Target

    2024-11-20_6c7fcae382c2d2fea386265bdebbc3d7_smoke-loader_wapomi

  • Size

    211KB

  • MD5

    6c7fcae382c2d2fea386265bdebbc3d7

  • SHA1

    3b6e9b79dcc8bd039fc912fc00c563a8348b7864

  • SHA256

    4ee3243418ea784f4f1bba72285e2ffbecf3fa35acd3ad27a785155a13d20898

  • SHA512

    c196700bd62f6164693970efeb177748a9a1e34c92b74342dd0ea14c061f97a75f649348459d3ad9537aca35c6a8f8e46fb3be27ac159d1021f73424084c0034

  • SSDEEP

    3072:5HZeDGitXAJi9YNThLEJgu1CMyp4+qSWPliqB5KGCH:5HZkdtYNT5EU4lSCiqX

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2