Extracted

• • Target

    2024-11-26_bed5ce33900ed5869cdc0276b26623e5_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    bed5ce33900ed5869cdc0276b26623e5

  • SHA1

    59e77e4fc22a8e35d04dcbca24185ddf95afdf73

  • SHA256

    538b56eaafc39514195be902ce379aacd525ad708053c9b88934e00427cb4e25

  • SHA512

    d2242ea68554507eb9b10ccdddd1c34262b65c3ff50ad810fb76f228211a58b2a6652b0c40b9b0c6863ecec608f948de7dee96b3d86b426d425dfa6327ec03aa

  • SSDEEP

    1536:fHB0UxMkzOt7HcvJGt5AdHIOWnToIf12Z/BGCq2iW7z:fhAWJGSCTBf12ZpGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2