Extracted

• • Target

    2024-12-25_55f206711f7472142c21a84fefa88074_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    55f206711f7472142c21a84fefa88074

  • SHA1

    27770f1560111220bcc761087adda0cc6933b67a

  • SHA256

    cdb5bdd33bdc2be02022565cb98d8eee8eb1e51e8a65bcbee50433d2db865fc5

  • SHA512

    ef6c22cc0cce508e560a1854ed0528bc2b715d83df22ac5c2bea67c1585c64a04a262cb1454768767ed3329095833e7c4674c4115847805013689b3cb52167fc

  • SSDEEP

    1536:RfnLq01weW5yX3jFxv49Nu4GhQi6GCq2iW7z:Y3ysTGhQpGCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2