Extracted

• • Target

    2024-12-08_b3670f2666c0f3ccb9456e0aab00480d_smoke-loader_wapomi

  • Size

    1.2MB

  • MD5

    b3670f2666c0f3ccb9456e0aab00480d

  • SHA1

    3a9efa649fecc41fd2e5b05630504452ce9d3bb5

  • SHA256

    d59f0807902e89eee53db2a85bab6131700fa6be2d36604cc32efe71c94ad6bf

  • SHA512

    2b3cea482fe944b0d7f3515abf8f9e6534c857622d0d26dd0bdcbd34e545a411e0222dfb129ec19709e516e999eef0e8c2b0f7db248dd5f1fcb445089c9c1de6

  • SSDEEP

    24576:07GO7dtrjrICw9XuXo7beSTdt5xbX02uvfTXfBxrj3d5E/jKQvVj4YpdjYY0td78:1EtnrICSooGSTD5xbX022fjBxrj3

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2