Extracted

• • Target

    2024-12-08_b417c90019f0ca1b6c228b4b52f26a9c_smoke-loader_wapomi

  • Size

    1.1MB

  • MD5

    b417c90019f0ca1b6c228b4b52f26a9c

  • SHA1

    8b7fbf89a595b182aae602c2417fcab7cb3e7b06

  • SHA256

    08f8ad6289e8891be5412c7db870c32f80e3ea1394ae2fb2aff29057eb8e991d

  • SHA512

    54892bf96ee18f04f48319b7ca0a82a1ecdc3a37f618124ed11c5e3659b071d1b822ffae039fe68df4d4cb7e24da417afb81784cae1b7182714a5140d68584a1

  • SSDEEP

    12288:ZqOPajQUXXP8QvLWFx6Mo5rippDC7ee1hpls4Ey+:ZnajQEPnvg6PhWDC750

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2