Extracted

• • Target

    2024-12-25_2bbb766adb4d63fe6b538b96efd0f2cd_smoke-loader_wapomi

  • Size

    80KB

  • MD5

    2bbb766adb4d63fe6b538b96efd0f2cd

  • SHA1

    4f81e784f20a6394756ad0f9ffd6b748695c2ce8

  • SHA256

    e11f4056e6678419d75175fb6ea20b18e5c99fb9c992cff32aab7472d671f417

  • SHA512

    0bf3ef892e70c5d38cd69231390813f9103a4ba2183b92ce8156c6c294afdf346ea9c39f9e23b795def2d6321b16bdf5e036cd3ea20c4b7e52cfb37b518992dd

  • SSDEEP

    1536:vfnLq01weW5yX3jFxv49Nu4GhQUGGCq2iW7z:u3ysTGhQ7GCH

  Score

  10^/10

  bdaejecaspackv2backdoordiscovery

  • Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec

  • Bdaejec family

    bdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2