Extracted

• • Target

    2024-11-25_dcb4cb9e91a7438d9f3d30ad85b3aa52_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    dcb4cb9e91a7438d9f3d30ad85b3aa52

  • SHA1

    e058cb8cbee8c910b65a3ed53f41930a74338461

  • SHA256

    ffe17da711e2c2099d5ef69df9bd8b590393f3fdb2d8dec9e0323fe689a99283

  • SHA512

    599d542ff2d5279dabcf2c9233cddeb3b8f0a4ad56e315516c9b8450d1b19a7975a0aac38a51ba61f56115ec965a05e58678f9e617bc31f99d9f4c80fae12af2

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQy9GCq2iW7z:Y3ysTGhQ6GCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2