Extracted

• • Target

    2024-12-02_8f293d8b4af3bd49386d58fd46779ebf_smoke-loader_wapomi

  • Size

    20.5MB

  • MD5

    8f293d8b4af3bd49386d58fd46779ebf

  • SHA1

    456aa72c47ec8289a5dd56ccf4de7c62d83116bd

  • SHA256

    6d94857fc354445b1d2f15db0b7403350be19f017f420b5509880b5017edff05

  • SHA512

    292530aca7da4f5f7d4d0da2bcb8e55f5eca938e53c489cf6bfcf796e93d2c6f1201584cf1d907e84a9ec883d541b3fca567e3a786a0b9e8815da80d378f542d

  • SSDEEP

    393216:ur3+y8fQd8tm7dovS7/FihycShbGha4fSkWVxJinFkuA:uj+yJd8YovS+wwa4faxM

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2