Extracted

• • Target

    2024-12-21_2cd5eba06940fe889ac1be1322abc379_smoke-loader_wapomi

  • Size

    90KB

  • MD5

    2cd5eba06940fe889ac1be1322abc379

  • SHA1

    addfaf5e64584b0ec8ecb5e4a66acf9ce2d9a133

  • SHA256

    1c2f171de1ca7635db99358aa9939ebe6e96b151fd10f4559d3c30807ba69600

  • SHA512

    f8b5302c82f90c730d823522742ee625fd082c7bca38b4391e16eb49d5cc0eb23661b75b84cad3fe8128077979d25e970c028ebe4c8002078e5d8d00962885e3

  • SSDEEP

    1536:zNcAKhXKk76oKSQkMWF4EXO+tAoqh/qmTdp0BmUmwGratQoQrI40GCq2iW7z:Jc7hakGQb1FT+pzh/qmTf0MwG2QrINGE

  Score

  10^/10

  bdaejecaspackv2backdoordiscoveryupx

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2