Extracted

• • Target

    2024-12-04_f34ae336de2b56131a11451bc3fd6e5d_smoke-loader_wapomi

  • Size

    983KB

  • MD5

    f34ae336de2b56131a11451bc3fd6e5d

  • SHA1

    3bc08e60e7730c6657f405bd9a9bbfaa2a2d1ea1

  • SHA256

    8ca484b2e1fb194cc4afd7e928a79da4911f41840de90ce1a5b3721ccbfc174d

  • SHA512

    1274e65c3965239ee74391c84854fd11c303d4c94b70ea23fa0abfdb7de88812d5717536a3a50987d8636a887169996ce2df29af22b5d906d3b828af193e3dd7

  • SSDEEP

    24576:+Iv5QimqIakPrYsMdX3gU22+c5c6apVuXg5jk:pOXUXwF2Nrg

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2