Extracted

• • Target

    2024-11-20_a5e375aaf8c891a31769c772fe4b2e74_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    a5e375aaf8c891a31769c772fe4b2e74

  • SHA1

    0e6f59f87ac64f2293a5a6a3b6aa4992a0ae800b

  • SHA256

    54938ca67d7f26498026f98c981973161233f528e26cc384c678d2bdedcafff1

  • SHA512

    e508da912a6b769df672d3adf19cd4aea8dfc1628a0c0c48cef9764b7b3c53b31c33f50407fa27d93e5ed223945aab43986749fb6d9f166306b26dc3fb9a1071

  • SSDEEP

    1536:Yg/6/tM8NXDjPX0QWlfGMckTQQRGCq2iW7z:Hk3U8kTQYGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2