Extracted

• • Target

    2024-12-09_8e43847f0b4c09d45f7c44b5928d9fd2_icedid_smoke-loader_wapomi

  • Size

    310KB

  • MD5

    8e43847f0b4c09d45f7c44b5928d9fd2

  • SHA1

    a320c92e79fca1b36d8cf0924b7ff18399f71cf6

  • SHA256

    b0b3f98718eba4c1e847d81f767c018ac291d233b247ae8aecae8883eb82be32

  • SHA512

    43d03337fd41b881958009f9bba8cef1d171e1aaa5cf41a8d30ee6bb3e3b8ad98a5164ba22d23fd09edeeeaa6a5307f6805bdca51a313f91cd16e657911b3f25

  • SSDEEP

    6144:oznAtGqS5NjM2KbQbNYuhZ+6+eAbuQ5Zu60HnPLhDgWo:oTLnp+BCQ5Zu60HnP1

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2