Extracted

• • Target

    2024-12-17_8a1a64da3b22df9044c7c546a171017b_smoke-loader_wapomi

  • Size

    89KB

  • MD5

    8a1a64da3b22df9044c7c546a171017b

  • SHA1

    fd2df67e7286f28729634fa2e0cdb200fff5ac1a

  • SHA256

    09842e2300fabb5d8d63b4f384f84186783ed683bad3a70e797c1efe68a9a92e

  • SHA512

    33515b234ad20b02960fc129b2bf08fb680c98303e3454df027b720c383e2a81dfd4ee766564bc27b9400b9373c4087037d596eaad96c0b64198f78c1433b838

  • SSDEEP

    1536:KMcrVadgJZ69WxVz7MW/UXVue/mSDb460GCq2iW7z:ncr8dgAy57elue/mSDb2GCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2