Extracted

• • Target

    2024-11-24_1fe1ac796c2b6ebff578f5df54cdf505_smoke-loader_wapomi

  • Size

    2.9MB

  • MD5

    1fe1ac796c2b6ebff578f5df54cdf505

  • SHA1

    bfdced5a78b3da55a9b40750177cf980244172f3

  • SHA256

    7f0156d1c1fb8ab8285b771ff2be70f9efedc6beb12f2f061026e36538237287

  • SHA512

    5353a07cbdf5233cbf8ddf7257425f718cabbb76605b05ed4cf371d560552e04fbc4764f278c639c8991048ec986b0b7643adb3e4c93851c854783856c745b69

  • SSDEEP

    49152:YrPT2Gn+45fu74LQ7A8Y+kKuxIhMF2dRvwKfrPwzuedUzxS3:KPT2a+45fjLQ9YhKuxI+kdGKTPY7dR

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2