Extracted

• • Target

    2024-12-21_b1deb7992fc27ed4f4b4307d1a8ce615_smoke-loader_wapomi

  • Size

    115KB

  • MD5

    b1deb7992fc27ed4f4b4307d1a8ce615

  • SHA1

    88e014372574dd35cf0a475d72cd9ba0c2916c62

  • SHA256

    b4bfb07b932ed7367c88b76f6d56e4b0bb3d3b8a49012aa0fa8a5b091d5d757c

  • SHA512

    e332e59496090f451c357a9404236dd27118f23140fa6a20c851deeb65b592f157335962b16b35139819851e32e97a8f5d4f038a6c05c471de39414df47d31d0

  • SSDEEP

    3072:Y4QdYiyJpcXWJ2JWfO1e4LwbNp5Q/TdGCH:Y4LJVf7WI

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2