Extracted

• • Target

    2024-12-21_46ebb40bac178df0dad682f3b27c539f_smoke-loader_wapomi

  • Size

    123KB

  • MD5

    46ebb40bac178df0dad682f3b27c539f

  • SHA1

    8c7701e19bf132f2b4e9a6b3218c1455444739a6

  • SHA256

    0711c2096b804fd2dfa077043fc9df0da00c4d0f1814185660f97ae350144b7b

  • SHA512

    0259909b530a2aefab216496862b73911424bff39f412a464e4b9a2d4192538a480be935ca1f5313076002cd6ec6a6952c52798107eb05ce0aec296d679335d4

  • SSDEEP

    1536:FidmnYwNl58Z2c9q+3C5azlvWKxkrz2+TTTTTga3QI7EKBdTGCq2iW7z:FidCYml58Z2Dj5aZXkrK/a7lBdGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Detected Nirsoft tools

    Free utilities often used by attackers which can steal passwords, product keys, etc.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2