Extracted

• • Target

    2024-12-15_dbc53e268807f9ac59c979a00253352b_smoke-loader_wapomi

  • Size

    11.2MB

  • MD5

    dbc53e268807f9ac59c979a00253352b

  • SHA1

    74cab7dea91af5d2ba383fc7bd2395ccc058452a

  • SHA256

    c881aa74c4a52b78c63e2913514ebc8d20b4f6e3fee3f95bceb9565ce3721b1e

  • SHA512

    3d43d54cebaf732fb7b528cd06a1dff345745689ea409cd4197403daae11854b56e57dd62968ffdfad97a4cb4e6423917dac437737da9fdc06c71bcbfd75def1

  • SSDEEP

    196608:6ixCfr91JP/l5iwnbF3OoPNlqkUBg6FSLuEzB3:6ixCfLZ/5nbF3O6NlqkUBgBP3

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2