Extracted

• • Target

    2024-11-27_219380d42a4b0a7f76f8c3cc098479b7_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    219380d42a4b0a7f76f8c3cc098479b7

  • SHA1

    00a72c989045650fade5e44ecc5df291215d8c9f

  • SHA256

    2db1f0083e383bbda658662749951742c1e8790f32c18e918c643e2fbd625f7f

  • SHA512

    0eb968ffe8a9c0617be66bd17d123d5b0453d7583c160c5899c0b24234b6dcd10cac90e8965be054bf040fcd9b93e9a34cc7400d73f8e5274070ae38f1714a44

  • SSDEEP

    1536:UEB6rH+8W3bN7PUA6pLr3+McGCq2iW7z:U66rH/nRpX+FGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2