Extracted

• • Target

    2024-12-01_62c2f95a4b0093d2f925a8572ed825af_smoke-loader_wapomi

  • Size

    885KB

  • MD5

    62c2f95a4b0093d2f925a8572ed825af

  • SHA1

    4273e0035bd84641dc49446aa0bd82fdb28fadc4

  • SHA256

    54d820dfdadae77efd6e460c9631a8ecf9a74c798965dd1f106b799331bc863f

  • SHA512

    f015554ba33927700ea0b5d6348f28dee718d426f01b59a902184bd14b456a3416abb23db2f9838710e2c61351a766e0cc7721d53323c2af45e45263e880be80

  • SSDEEP

    12288:fKeoUPIu22k/5fQUM3r+0C2NAJcCL1xrNGGfsgb7JO:CuB2FEVNAJcaNGGfsS

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2